×
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!
  • Students Click Here

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

AACC security certificate to install on AAAD client

AACC security certificate to install on AAAD client

AACC security certificate to install on AAAD client

(OP)
Hi all,

Our customer is running AACC R7 integrated with Aura R8 and I want to know from where I can download the certificate that must be installed on the client PC (with AAAD installed) ?

Do I need to exported only from AACC ? or I need also to export it from SMGR ?

Which is the certificate file that AAAD can accept (.crt or .cer) ?

Thank you in advance for your help.

Regards.

RE: AACC security certificate to install on AAAD client

I would presume SMGR. AACC needs to use AES for CTI on CM. To do that with the special mode of not needing licensing, it needs to do a secure handshake.

That being the case, it's pretty much required that AES and AACC enroll to SMGR to accomplish all that, so I'd figure that'd be setup in your environment properly.

Do a wireshark of a AAAD trying to connect and put a display filter of "ip.addr == 1.2.3.4" without the quotes presuming 1.2.3.4 was the AACC you were registering to.

When registering, if you see a client hello from you and a server hello back, you can watch the TLS handshake and see what certificate is being offered by AACC that you need to trust.

You can even export it from Wireshark to import into Windows Trusted Root CA store.

RE: AACC security certificate to install on AAAD client

(OP)
Hi kyle555,

Thanks for your reply, I found on the documentation that you can also export the certificate from AACC (Security Manager > Store maintenance > Export root certificate) that can be used by client machines

I think don't need to use Wireshark

Thank you.

RE: AACC security certificate to install on AAAD client

(OP)
Hi,

On the AAAD logs, I have the below error:

Error (Web Exception) retrieving data from Web Service GetSiteParameterBeforeLogin
EXCEPTION:
System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.

However, I have install the certificate into PC Agent

Any idea ?

Thank you.

RE: AACC security certificate to install on AAAD client

pcap it? in the FATAL message when the handshake is refused, it might put some more info in there.

Like, could not establish trust relationship means its probably not because it's expired, but that the code for AAAD applies some strict rules - like if it's a default cert and AAAD wants to see a Common Name or subjectAlternativeName that = the FQDN or something.

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members! Already a Member? Login

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close