Security

Upcoming community maintenance Oct. 27th through Oct. 29th
For more info click here
Reply
Highlighted
Moderator

Re: ArubaQuickConnect Windows SmartScreen

1. Use DigiCert to create Code Signing CSR

2. Have Public CA (Such as GoDaddy) create a Code Signing Cert from this CSR

3. Using Windows Certificate Manager MMC Snap-in - Export the Certificate created by DigiCert

3. Import the signed certificate from public CA back into DigiCert utility

4. Export the certificate from the DigiCert utility as a PFX with password.

5. In ClearPass OnBoard / Management and Control / - Upload Code Signing Certificate

5a. Upload the PFX file and enter the password.

 

cs-import.PNG

 

code-signing-summary.PNG



If this response is more than 1 year old, it may no longer be accurate. Please consult official Aruba documentation, TAC or your Aruba SE.

| Aruba Alumni | @timcappalli | timcappalli.me |

Highlighted
Regular Contributor II

Re: ArubaQuickConnect Windows SmartScreen

Awesome, thanks so much Tim! I will give this a shot and report back. 


AMFX/ACEX #69
Aruba Partner Ambassador
Highlighted
Regular Contributor II

Re: ArubaQuickConnect Windows SmartScreen

The certificate process works as you stated. I was able to import the code signing cert and apply it to the Provisioing settings for Windows. It however does not correct the SmartScreen issue.

 

The Smartscreen does now correctly reflect that the publisher is applied but it is still being 'blocked'. 

 

Anything else you think I could try?

 

Again, thanks for your time Tim, I very much appreciate it. 

 

 


AMFX/ACEX #69
Aruba Partner Ambassador
Highlighted
Regular Contributor II

Re: ArubaQuickConnect Windows SmartScreen

Update.. from my understanding, the Code Signing Cert will hold a reputation with Microsoft depending on who signed the cert. That reputation is what triggers (or not) the Smartscreen filter. I would expect that GoDaddy would have a good reputation with MS. Speaking with them, they say they have no control or influence on how MS handles the reputation or Smartscreen.  I could call MS but I cannot image I will get far. 

 

My next steps will be to open a TAC case with Aruba but technically this isnt an Aruba issue either. 

 

I would love to hear from others if they have gotten this to work. 

 

Tim, thanks again for all the help. Almost there! 


AMFX/ACEX #69
Aruba Partner Ambassador
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: