Cloudpath

XSupplicant Server Configuration

Name:

Trusted Server Certificate

Cloudpath Help :

Cloudpath can detect the server certificate authorities within the XSupplicant configuration.

Supported settings include:

Selected - Default. When selected, server certificate validation will limit acceptable certificates to those signed by the CA(s) specified.

The network administrator specifies the server certificate by thumbprint. The name and thumbprint for each certificate authority preinstalled on Windows XP is available here. If the certificate authority is not on this list or you have a self-generated CA (for self-signed certificates), you may obtain the thumbprint by opening the certificate in Windows (double-click the certificate file) and locating the 'Thumbprint' field on the 'Details' tab.

If the certificate authority is not a default Windows XP certificate authority, you should also install the certificate authority (see 'Root CA Certificate' setting in Application Settings).

For auto remediation, the certificate authority's certificate must be installed on the user's machine, either because it previously existed or was installed by the 'Root CA Certificate' setting.

This setting is only applicable if Validate Server Certificate is set to 'Enabled'.
By default, XSupplicant will not specify a server certificate.

By default, this is set to the variable ${defined_cas}, which will trust all CAs checked or installed by Cloudpath in the Application Settings section. If you prefer to specify this manually, you may specify the trusted root CA(s) by thumbprint. Multiple trusted root certificate authorities may be specified by creating a semi-colon separated list of thumbprints. This setting is only applicable if Verify Server Certificate is set to 'Enabled'.

On Windows, the certificate thumbprint can be found using the following:

Double-click the certificate file.

Click the 'Details' tab.

Scroll down to the 'Thumbprints' entry.

Copy & paste the value of the 'Thumbprints' entry.

For the list of common Trusted Root Certificate Authorities, click here.