Dell ThinOS 2402 Administrator’s Guide

Request the certificate automatically using Wyse Management Suite

1. Log in to Wyse Management Suite.
2. Go to Groups & Configs and select your preferred group.
3. Expand Edit Policies and click ThinOS 9.x.
   The Configuration Control | ThinOS window is displayed.
4. In the Advanced tab, click Privacy & Settings.
5. Click SCEP.
6. Click the Enable Auto Enrollment slider switch to enable automatic certificate enrollment using the SCEP server.
7. Click the Enable Auto Renew slider switch to automatically renew the certificate.
   The client requires a password to renew the client certificate. So if you are using an enrollment password that can expire in a short time, the enrollment password must valid at the time when autorenew behavior happens on the client. Dell Technologies recommends using the admin credentials or a fixed enrollment password to autoenroll, and auto-renew the certificate.
8. Click the Select Install CA Certificate slider switch to install the root CA's certificate as a trusted certificate after successfully getting the client certificate.
9. Click Select Auto Renew Time Frame.
   The value for the option ranges from 10% to 100%, and the default value is set at 50%. This means that the auto renewal is performed only after a private certificate's 1/2 valid period has passed. If set at 10%, it means that the auto renewal is performed only after a private certificate's 1/10 valid period has passed. You can check the valid period of the private certificate in the local menu by going to System tools > Certificates > Check common name.
10. Specify the country/region name, state, location, and other details.
11. Click Save & Publish.
    You can also configure the SCEP Administrator URL, Admin User, Admin User Password, and Admin User Domain options to request for SCEP certificate. If the enrollment password is not specified, the client uses the SCEP Administrator URL, Admin User, Admin User Password, and Admin User Domain options to request SCEP. If you specify the enrollment password, the enrollment password is used for SCEP, even though the password entered is invalid. In this scenario, the SCEP Administrator URL, Admin User, Admin User Password, and Admin User Domain options are ignored.

    NOTE:When using a SCEP Administrator URL and Request URL, you must use the prefix HTTP or HTTPS.
    From ThinOS 9.1.5067 release onwards, an option Ignore Server Certificate Check is added under Privacy & Security > SCEP.
    This option is disabled by default. You must install a CA certificate first and then request a SCEP certificate by using the administrator URL. When using the administrator URL, you must FQDN with the prefix HTTPS. Do not use the IP address in the URL.

    If this option is enabled, you need not install the CA certificate on the client. You can directly request for a SCEP certificate by using the administrator URL with the prefix HTTPS.

    NOTE:If you are using earlier versions of ThinOS and if you have used the IP address in the administrator URL with the Ignore Server Certificate Check option disabled, you must change the URL to FQDN. If the Ignore Server Certificate Check option is enabled, you need not change the IP address in the administrator URL.