Dell ThinOS 9.1.4097, 9.1.4234, 9.1.5067, and 9.1.6108 Administrator’s Guide

Request the certificate automatically using Wyse Management Suite

1. Log in to Wyse Management Suite.
2. Go to Groups & Configs and select your preferred group.
3. Expand Edit Policies and click ThinOS 9.x.
   The Configuration Control | ThinOS window is displayed.
4. In the Advanced tab, click Privacy & Settings.
5. Click SCEP.
6. Click the Enable Auto Enrollment slider switch to enable automatic certificate enrollment using the SCEP server.
7. Click the Enable Auto Renew slider switch to automatically renew the certificate.
   The client requires a password to renew the client certificate. So if you are using an enrollment password that can expire in a short time, the enrollment password must valid at the time when auto renew behavior happens on the client. Dell Technologies recommends using the admin credentials or a fixed enrollment password to auto enroll, and auto renew certificate.
8. Click the Select Install CA Certificate slider switch to install the root CA's certificate as a trusted certificate after successfully getting the client certificate.
9. Specify the country/region name, state, location, and other details.
10. Click Save & Publish.
    You can also configure the SCEP Administrator URL, Admin User, Admin User Password, and Admin User Domain options to request for SCEP certificate. If the enrollment password is not specified, the client uses the SCEP Administrator URL, Admin User, Admin User Password, and Admin User Domain options to request SCEP. If you specify the enrollment password, the enrollment password is used for SCEP, even though the password entered is invalid. In this scenario, the SCEP Administrator URL, Admin User, Admin User Password, and Admin User Domain options are ignored.

    NOTE:When using a SCEP Administrator URL and Request URL, you must use the prefix HTTP or HTTPS.
    From ThinOS 9.1.5067 release onwards, an option Ignore Server Certificate Check is added under Privacy & Security > SCEP.
    This option is disabled by default. You must install a CA certificate first and then request a SCEP certificate by using the administrator URL. When using the administrator URL, you must FQDN with prefix HTTPS. Do not use the IP address in the URL.

    If this option is enabled, there is no need to install the CA certificate on the client. You can directly request for a SCEP certificate by using the administrator URL with prefix HTTPS.

    NOTE:If you are using earlier versions of ThinOS and if you have used the IP address in the administrator URL with the Ignore Server Certificate Check option disabled, you must change the URL to FQDN. If the Ignore Server Certificate Check option is enabled, there is no need to change the IP address in the administrator URL.