Welcome to ISAserver.org

SSL Certificate Authentication

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Threat Management Gateway (TMG) 2010] >> General >> SSL Certificate Authentication

Page: [1]

Message

<< Older Topic Newer Topic >>

SSL Certificate Authentication - 28.Jun.2010 10:51:44 AM

dvizzle

Posts: 236
Joined: 20.Apr.2009
Status: offline

I am beginning to look into this possibility to authenticate clients using SSL Certs as a secondary option, but all the articles I read seem to be focused on IIS and web publishing. My TMG servers are not doing web publishing and IIS is not installed.

I can't find anything good in the new TMG book, so is there anyone more experienced in this that can point me in the right direction?

I tried using my domain wildcard cert but it didn't like that. Guessing I need to generate a self signed cert? If I'm not using IIS, how would I do that?

I'm looking for a few auth alternatives for some Apple users that are having issues with the integrated auth prompting for username/password on each page of a session.

Post #: 1

Featured Links*

RE: SSL Certificate Authentication - 28.Jun.2010 5:19:03 PM

Jason Jones

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline

Authentication options for outbound proxy are limited and SSL client auth is not one of them.

You have the ability to use Basic authentication and you can also configure the auth repository to be RADIUS as opposed to Active Directory.

Cheers

JJ

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to dvizzle)

Post #: 2

RE: SSL Certificate Authentication - 29.Jun.2010 8:23:49 AM

dvizzle

Posts: 236
Joined: 20.Apr.2009
Status: offline

Thank you for clearing that up. It was a little confusing.

I can't do basic. I need something secure/encrypted for the Apple users as an alternative to using Active Directory integration. My linux users have cntlm working w/TMG but still having issues with our Apple holdouts.

(in reply to dvizzle)

Post #: 3

RE: SSL Certificate Authentication - 2.Jul.2010 6:14:20 AM

sowmika

Posts: 26
Joined: 13.Apr.2010
Status: offline

Hi,In my experience ,you may use this http://www.xnynz.com/ cheap and best service provider , in before here only i got my SSL certificate for my website ,you may also try this very cheap rate ,visit this site for more details.

(in reply to dvizzle)

Post #: 4