Certificate Group

Introduced an administrator interface to create a certificate group and assign users to the group. You can assign multiples users from different communities for realms and enable them with a common privilege to use the PKI authentication server.

To create a certificate group

1. Log in to AMC.
2. Navigate to Security Administration > Users & Groups.

3. In the Mapped Accounts tab, click + icon and select Certificate Group option.

   

4. In the Name field, enter a unique name to identify this group in access rules and communities.
5. In the Description, enter the description for the certificate group.
6. In the Realm, select Device VPN.
7. Select the certificate field and type of comparison from the respective drop-down box.

8. In the Look for this value field, enter the text that should be present in the certificate.

   The system uses this standard format for distinguished names: emailAddress=first.last@company.com,CN=first last,OU=Department,O=Company,L=City,ST=State,C=Country.

9. Click Save.

   Once the certificate group is created, you can select the certificate group when creating access control rules or when selecting the members of a community.

   

Support for Domain Computers in AD server as VPN users

You can now select the domain computers as VPN users in AD server mapped to a realm. Also, you can select and use the domain computers as VPN users when creating access control rules or selecting the members of a community.

To select a domain computer as VPN users

1. In the AMC, navigate to Security Administration > Users & Groups.

2. Select the Mapped Accounts tab.

3. Click + icon and select Browse Directory from the drop-down menu.

4. Select the Realm you want to search and select the Folder.

   Browse directory now allows browsing of both domain users and domain computers.