ESET Secure Authentication On-Prem – Table of Contents

Make certificates trusted

Certificates signed by a trusted certification authority are automatically trusted everywhere.

Certificates that must be made trusted:

•Self-signed certificates

•Certificates signed by a custom certification authority that must also be made trusted.

Most web browsers can work with untrusted certificates while they display a warning. You can avoid the warning by adding an exception for the certificate; however, this is not recommended.

Add certificates to the System Store

What it works for:

•Components connecting to the Authentication Server

•Some web browsers, for example, Internet Explorer, Microsoft Edge, and Google Chrome

What it does not work for:

•Mozilla Firefox

•Accessing the customer API through solutions that do not use the system store to check for certificates

Certificate import location in the System Store

•Current User/Local machine

oCurrent User—Only works for the current user (for example, access from a browser)

oLocal machine—Works everywhere (for example, ESA components running as Local System)

•Trusted People/Trusted Root Certification Authorities—Use Trusted Root Certification Authorities for a certification authority.

Import the certificate

Using a certificate file:

1.Double-click the certificate file (for example, .crt).

2.Select Install Certificate, and follow the Installation Wizard instructions.

Using the MMC console:

1.Press Windows key + R, type mmc.exe, and press Enter.

2.Click File > Add/Remove Snap-in > Certificates > Add.

3.Select Computer account and click Next.

4.Select Local computer, click Finish, then click OK.

5.In the left navigation pane, expand one of these:

•Certificates > Trusted people to import a self-signed certificate

•Certificates > Trusted Root Certification Authorities

6.Right-click Certificates, select All Tasks > Import.

7.Follow the Certificate Import Wizard instructions.

Installing a standalone ESA component on a computer adds the certificate information received from the Authentication Server to the Trusted People store.