Trusted Certificates

Overview

CA certificates are used in the Safous platform to form trust to end-entity certificates issued by them. The CA certificates are used in Conditions profiles and Device Policies to validate end-entity certificates.

Prerequisites

• The admin user must have in hand the CA certificate in PEM format. The certificate file can have the file extensions .pem, .cer or .crt.

Configuration

1. Log in to the Safous Admin Portal.

2. Navigate to the Policies > Trusted Certificates page.

3. Click the Add button.

   

4. In the Add trusted certificate window, enter a name for the file.

5. Paste the contents of the PEM certificate file in the text box under CA Trusted Certificate, or click the upload icon to select the file.

   

6. To enable Safous Agent passwordless authentication:

   • Check the 'Use for passwordless authentication' checkbox.

   • Choose the certificate attribute used to identify the user (CN or Email).

     

7. Click Create.

8. The certificate will be listed on the page and can now be used when configuring Conditions profiles or Device Policies.