topic Re: Capsule VPN (ios) auth with 3rd-party certificates in SASE and Remote Access

Capsule VPN (ios) auth with 3rd-party certificates

dede79 — Sat, 16 Sep 2023 17:54:13 GMT

Hello,

we try to setup auth for the capsule vpn clients with the certificates rolled out by the MDM.

I added the MDM CA as trusted opsec pki, the certs and capsule configs are pushed to all devices but trying to connect I just get "malformed reply from site".

Is it necessary that the gateway (R81) also has installed a certificate from thet mdm-ca to authenticate the devices?

Do I have to create users for that devices or map them better to an ldap group?

Case is open since many weeks but no progress...maybe someone here got it work.

Re: Capsule VPN (ios) auth with 3rd-party certificates

the_rock — Sat, 16 Sep 2023 20:12:53 GMT

Is this for harmony mobile? If so, we have a customer where this works, so I can check it Monday.

Andy

Re: Capsule VPN (ios) auth with 3rd-party certificates

dede79 — Sun, 17 Sep 2023 07:08:39 GMT

no - just capsule vpn.

Re: Capsule VPN (ios) auth with 3rd-party certificates

the_rock — Sun, 17 Sep 2023 14:42:39 GMT

K, got it. Maybe confirm with TAC, see what they say.

Re: Capsule VPN (ios) auth with 3rd-party certificates

dede79 — Tue, 26 Sep 2023 10:09:08 GMT

Any news? Tac says we need an https cert of the 3rd party CA on mob blade - this would lead to a cert replacement since only one cert is possible per gateway (...usercheck......remotew access client trust) - so no option.