Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Jan_Kleinhans
Advisor
Jump to solution

Machine Authentication Certificate and User Authentication RADIUS

Hello,

we try to implement machine authentication to have the Windows Clients connect before the User Enters his credentials.

At the moment we are using RADIUS 2FA authentication. 

How to have the client send the certificate and then ask the user via SDL for RADIUS authentication?

We have enabled Machine Certificate Authentication when Available under VPN-Clients - Authentication.

There is a certificate on the client.

The authentication method is set to "Defined on User Record (Legacy)"

In the attached file are the settings of realms_for_blades

 

What do we have to change to use this feature?

 

Best regards,

 

Jan

0 Kudos
1 Solution

Accepted Solutions
G_W_Albrecht
Legend
Legend

See sk86240: "Defined on user" scheme does not work with a second authentication scheme (except for DynamicID).

CCSE CCTE CCSM SMB Specialist

View solution in original post

0 Kudos
3 Replies
G_W_Albrecht
Legend
Legend

See sk86240: "Defined on user" scheme does not work with a second authentication scheme (except for DynamicID).

CCSE CCTE CCSM SMB Specialist
0 Kudos
Jan_Kleinhans
Advisor

Thank you very much. At the moment I will not be able to test this but this should be the problem.

0 Kudos
Milan_Jovanovic
Contributor

Hi Albrecht,

Regarding  solution on Machine Cert I have few questions:

When we implement Machine Cert is it possible at same time for some LDAP AD users for example in specific group or OU to use just AD user pass authentication without Machine Cert?

 When we implement Machine Cert are we able to authenticate with mobile device (Android,IOS etc) with endpoint client using same AD user for which is mandatory machine cert?

When we use AD + machine cert auth is it possible in same time for some users to use Local defined in SMS user+cert+pass endpoint authentication?

If answers are yes on this questions, can all of this function in same time?

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events