Technical Documentation

Configuring Infranet Controller Certificate Access Restrictions (NSM Procedure)

Certificate access restrictions restrict Infranet Controller and resource access by requiring client side certificates.

To configure Infranet Controller certificate access restrictions:

  1. In the NSM navigation tree, select Device Manager > Devices.
  2. Click the Device tree tab, and then double-click the Infranet Controller device for which you want to configure certificate access restrictions.
  3. Click the Configuration tab. In the configuration tree, select the level at which you want to implement certificate access restrictions:
    • Realm level—Select:
      • Administrators > Admin Realms >Select Realm > Authentication Policies > Certificate to configure certificate access restrictions for admin realms.
      • Users > User Realms >Select Realm > Authentication Policies > Certificate to configure certificate access restrictions for user realms.
    • Role level—Select:
      • Administrators > Admin Roles > Select Role > General > Restrictions > Certificate Restrictions to configure certificate access restrictions for admin roles.
      • Users > User Roles > Select Role > General > Restrictions > Certificate Restrictions to configure certificate access restrictions for user roles.
  4. Add or modify settings as specified in Table 1.
  5. Click one:
    • OK—Saves the changes.
    • Cancel—Cancels the modifications.

Table 1: Certificate Access Restrictions Configuring Details

Option

Function

Your Action

Allow

Restricts Infranet Controller and resource access by requiring client-side certificates.
  • Select All users to allow users to access the Infranet Controller or resources from any machine.
  • Select Users with a trusted client certificate to allow users to access the Infranet Controller from a machine with a trusted client certificate.
  • Select All users, remember certificate while user is signed in to remember all the users’ certificate while they are signed in.

    Note: This option is applicable for admin and user realms.

Certificate Field

Specifies the certificate field information for the field/value pair.

Enter the certificate field information.

Expected Value

Specifies the expected value information for the field/value pair.

Enter the expected value information.