3 ms·
There is one problem with this - now that you've deployed client side certs you now have to implement a software distribution product just to deploy certs to th
by blantonl 17y ago
There is one problem with this - now that you've deployed client side certs you now have to implement a software distribution product just to deploy certs to the 100's of computer that require them... or, in this article case, the single computer) :)
Systems Management vendors love to sell software distribution products to help reduce the distribution requirements for client side certs, but in the end most folks will balk at the price and end up resorting to the sneaker-net approach.
- easyfrag 17y agoWouldn't you be able to do this via Active Directory group policy?
- dschobel 17y agoThat's the route I would have gone, just write some tiny local web app which authenticates against AD and then redirects to the external service. I don't know why they wanted to go ip-based or even bother with cookies since AD queries are practically free. In ASP.net with all the builtin integrations for AD that's a one day project.
- BruteForceIT 17y agoAhh yes, the expensive deployment options. Too true. You can use Admin Arsenal. (www.AdminArsenal.com). It has a 30-day fully functional trial so as a one-time option you can do the cert deployment at no cost. Plus, Admin Arsenal doesn't use agents and is installed on your workstation, so it doesn't require its own server. If you want to keep it the licensing is simple - per administrator, regardless of the number of systems that you manage. Check it out.