It sounds like we are not able to validate the certificate or the chain of the certificate that is being provided by the client to the Dell Security Management Server. The service that handles activations, the Dell Security Server, leverages a java keystore for the certificates that it is aware of and any trusts that it may hold. This keystore will need to be updated to hold the root and the intermediate certificate that are being used in the chain for the smartcard certificates that have been issued to your users for login.
To update this, we can leverage keytool that is built into the Dell Security Management Server to import the certificate into the keystore. This KB Article, specifically under the section of "Dell Data Protection | Enterprise Edition Configuration" should point you in the right direction: https://www.dell.com/support/article/us/en/19/sln303783
I will work with the team to separate this section out to its own KB article and get a bit more detail around why this may be needed.
Let us know if this does or does not work for you!
Thanks for the response. You were right, and it's working now that I've added the root and intermediate CA certificates to the cacerts keystore. The only catch was that the article is for Windows, and I use the virtual edition running on Linux, so the paths were different. It was easy enough to find though. /opt/dell/server/security-server/conf/cacerts
dell-dale p
2 Intern
•
156 Posts
1
March 28th, 2019 05:00
Hi RMills1!
It sounds like we are not able to validate the certificate or the chain of the certificate that is being provided by the client to the Dell Security Management Server. The service that handles activations, the Dell Security Server, leverages a java keystore for the certificates that it is aware of and any trusts that it may hold. This keystore will need to be updated to hold the root and the intermediate certificate that are being used in the chain for the smartcard certificates that have been issued to your users for login.
To update this, we can leverage keytool that is built into the Dell Security Management Server to import the certificate into the keystore. This KB Article, specifically under the section of "Dell Data Protection | Enterprise Edition Configuration" should point you in the right direction: https://www.dell.com/support/article/us/en/19/sln303783
I will work with the team to separate this section out to its own KB article and get a bit more detail around why this may be needed.
Let us know if this does or does not work for you!
RMills1
25 Posts
0
March 28th, 2019 11:00
Hey Dale,
Thanks for the response. You were right, and it's working now that I've added the root and intermediate CA certificates to the cacerts keystore. The only catch was that the article is for Windows, and I use the virtual edition running on Linux, so the paths were different. It was easy enough to find though. /opt/dell/server/security-server/conf/cacerts
Now to go upgrade from 10.1 to 10.2.1!
Thanks,
RMills1