Adding personal certificates to Thin Client

Viewing 4 posts - 1 through 4 (of 4 total)
  • Author
    Posts
  • #42852
    raul04
    Participant
    • Total Post: 16
    • Regular Joe
    • ★★

    HI,

    A group of users need using their standard Thin clients to be able to access the test environment from an external environment.
    The vendor is providing users a class 2 personal sign certificate – PersonalSign 2 Pro (https://www.globalsign.com/en/personalsign/pricing/)

    These certificates cannot be associated with AD groups hence we need to add them in the wnos directory and add them as part of the ini file.

    My concern is these certificates are user specific and assign to Ownership of email address plus identity assurance of individual plus assurance of Organization existence.

    What will be the impact of having these certificates in the central wnos folder and adding them in the ini file, for other users?

    #42857
    ConfGen
    Keymaster
    • Total Post: 10696
    • Jedi Master
    • ★★★★★★★

    If you place the certs in the cacerts folder under /wnos and add them to the wnos.ini, all units will get these certificates.
    Two options I see here:
    1. manually install the certificates to the clients from a USB stick. Use the ThinOS Certificate Center to do so.
    2. copy them to the cacerts folder and create username.ini files. In those INI files put the addcertificate parameter. But this would result in the certs being copied to each client where the user is logging in to.

    CG

    #42860
    raul04
    Participant
    • Total Post: 16
    • Regular Joe
    • ★★

    Thanks for your response.
    I have a few queries, hope you can answer them.

    Even though all devices will get these certificates, how would the certificate affect a user who does not have a certificate assigned to him, as these are user certificates?

    I wasn’t able to find the steps for Manually installing them on the specific Thin Clients, could you please help here?

    Can you guide me to any links or article to read for the 3rd option? That would seem most fit for us as the users ideally use the same Thin Clients.

    Thanks!

    #42864
    ConfGen
    Keymaster
    • Total Post: 10696
    • Jedi Master
    • ★★★★★★★

    Manual install: depends on the firmware version. But go to the Certificate Manager (Network Setup – Security or System Tools). There you can manually add certs.

    CG

Viewing 4 posts - 1 through 4 (of 4 total)
  • You must be logged in to reply to this topic.