Security

Reply
Contributor II
Posts: 49
Registered: ‎11-23-2014

How to push server certificate to computer in Workgroup

I am not sure if this question got answered.

 

We have a domain controller with IAS installed. Some of the computers are in WORKGROUP and some have jointed domain.

 

The computers joined the domain has no problem getting authenticated as the domain pushed the server certificate on first connection.

 

Computers in WORKGROUP cannot be authenticated as the server certificate is not installed.

 

Is there any way that we can do to automatically push server certificate upon first login.

 

When login with Mac OS, the certificate is automatically pushed and received fro IAS.

 

Thank you for the help!

 

Regard,

WIlson 

Guru Elite
Posts: 20,968
Registered: ‎03-29-2007

Re: How to push server certificate to computer in Workgroup

Non-domain computers do not have this capability, so it is not possible to do this automatically.

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Guru Elite
Posts: 8,447
Registered: ‎09-08-2010

Re: How to push server certificate to computer in Workgroup

Are you using a private or publicly signed cert?

If it's public, there is no need to push anything to the device. It should already have the root CA.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor II
Posts: 49
Registered: ‎11-23-2014

Re: How to push server certificate to computer in Workgroup

Cappalli,

  It is privately signed cert. The cert will be used within our campus domain.

 

Thank you for the help!

 

Regards,

Wilson

Guru Elite
Posts: 8,447
Registered: ‎09-08-2010

Re: How to push server certificate to computer in Workgroup

You could use ClearPass QuickConnect to put the network configuration and certificate authority on the device.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
Showing results for 
Search instead for 
Did you mean: