Adding or Editing a Domain with Digital Certificates

To add or edit a domain for digital certificate authentication

1. Navigate to the Portals > Domains window and click Add Domain or Configure for the domain to edit. The Add Domain or Edit Domain window is displayed.

   

2. If adding the domain, select Digital Certificate from the Authentication Type menu. The Digital Certificate configuration field displays.
3. If adding the domain, enter a descriptive name for the authentication domain in the Domain name field. This is the domain name users selects to log in to the Secure Mobile Access portal.
4. Select one or more certificates from the All CA certificates list to be added to the Trusted CA certificates list. The All CA certificates list displays all available certificates for the SMA appliance that were imported from the system certificate setting.
5. Enter the Username Attribute as CN. This uses the CN attribute of the client certificate as the login username.
6. Click Accept to save changes. Next, you need to import the client certificate to your Web browser.

To import the client certificate

1. Navigate to the Certificate details on your Web browser’s settings.

   

2. Select the CA domain. A dialogue window displays. Choose a client certificate to authenticate. Click OK.

   The authentication completes if the CA of the client certificate is on the Trusted CA certificates list. If the client certificate is not on the Trusted CA certificates list, the appliance blocks access and displays an error message.

3. Next, the client certificate user must be authorized.

To authorize the client certificate

1. Navigate to the Portals > Domains window and click the Configure icon for the domain to edit.
2. Select Enable group affinity checking.
3. Select one of the available domains from the drop-down menu to designate as the Server.
4. Click Accept.