• Secure Mobile Access 10.2 for the SMA 100 Series
• About This Guide
  • Organization of This Guide
  • Guide Conventions
• Virtual Office Overview
  • About Virtual Office
    • Accessing Virtual Office Resources
  • Browser Requirements
  • About Certificates
  • About the Virtual Office Web Interface
  • Logging Out of the Virtual Office
• Using Secure Mobile Access Connect Agent
  • What is the Secure Mobile Access Connect Agent?
  • Supported Operating Systems
  • Downloading and Installation
  • Setting Up the SMA Connect Agent
    • Proxy Configuration
    • Logs
    • Browser Warning
  • End Point Control (EPC)
  • PDA (Personal Device Authorization)
    • SonicWall Application
• Using Virtual Office Authentication
  • Importing Certificates
  • Using Two-Factor Authentication
    • User Prerequisites
    • RSA Two-Factor User Authentication Process
      • Logging into Virtual Office Using RSA Two-Factor Authentication
      • Creating a New PIN
      • Waiting for the Next Token
    • VASCO Two-Factor User Authentication Process
      • Logging into Virtual Office Using VASCO Two-Factor Authentication
      • Other RADIUS Server Two-Factor User Authentication Process
    • DUO Security Authentication
  • Using One-Time Passwords
    • User Prerequisites
    • Logging In with an Email One-Time Password
    • Logging In with a Mobile App Time-based One-Time Password
    • Logging In with an SMS One-Time Password
    • Generating Backup Codes
    • Configuring One-Time Password Settings for E-mail
    • Configuring One-Time Password Settings for Mobile App
    • Configuring One-Time Passwords for SMS-Capable Phones
    • Configuring One-Time Password Settings for SMS
    • Verifying User One-Time Password Configuration
  • Using NetExtender
    • Prerequisites for Windows Clients
    • Prerequisites for Linux Clients
  • Using Mobile Connect
    • Prerequisites for Apple iOS Clients
    • Prerequisites for Android Smartphone Clients
    • Prerequisites for macOS Clients
  • Using File Shares
    • Using HTML-based File Shares
    • Downloading Files and Folders using HTML5 File Share
  • Managing Bookmarks
    • Adding Bookmarks
      • RDP Bookmarks
        • Determining the Remote Computer’s Full Name or IP Address
        • Configuring Remote Desktop Access on the Remote Computer
      • VNC Bookmarks
      • Citrix Bookmarks
      • Web Bookmarks
      • Mobile Connect Bookmarks
      • FTP Bookmarks
      • SSHv2 Bookmarks
    • Editing Bookmarks
    • Removing Bookmarks
    • Using Bookmarks
      • Using Remote Desktop Bookmarks
      • Using VNC Bookmarks
      • Using Citrix Bookmarks
      • Using Web Bookmarks
      • Using Mobile Connect Bookmarks
      • Using File Share Bookmarks
      • Using FTP Bookmarks
      • Using Telnet Bookmarks
      • Using SSHv2 Bookmarks
      • Global Bookmark Single Sign-On Options
      • Per-Bookmark Single Sign-On Options
• Warranty and License Agreements
  • GNU General Public License (GPL) Source Code
  • Limited Hardware Warranty
  • End User License Agreement
• SonicWall Support
  • About This Document

About Certificates

If the SMA appliance uses a self-signed SSL certificate for HTTPS authentication, then it is recommended to install the certificate before establishing a NetExtender connection. If you are unsure whether the certificate is self-signed or generated by a trusted root Certificate Authority, SonicWall recommends that you import the certificate. The easiest way to import the certificate is to click Import Certificate on the System > Certificates page.

If the certificate is not issued by an authorized organization, a message is displayed warning users of the risk. You can then view detailed information and choose to continue or end the connection.

When using the network logon method from the Windows login screen, NetExtender uses System Store for certificate-based authentication. When you are already logged in to Windows, NetExtender uses the User Store for certificate-based authentication. Users who wants to use the network logon method when certificate authentication is also enabled should import their user certificate into the System Store as well as into the User Store.