Pragma Systems Technical Forum

Use self-signed X509v3 certificate with Pragma Fortress Client

https://forums.pragmasys.com/Topic403.aspx

By mohitgupta153 - 4/10/2018 3:19:24 AM

Can we use self-signed user certificate with Pragma SSH client? If Yes, please share the steps.

Thanks
By Technical Support Group (TSG) - 4/10/2018 9:33:41 AM

 
mohitgupta153 - 4/10/2018 9:19:24 AM
Can we use self-signed user certificate with Pragma SSH client? If Yes, please share the steps.

Thanks

Yes, you can use any certificate as long as it is recognizable by the OS. Please see www.pragmasys.com/ssh-client/topics/idh-ssh.htm for instructions on making sure the certificate is stored in the user certificate store.

Then see www.pragmasys.com/ssh-client/topics/idh-clauthentication.htm for instructions on how to point the client to use the certificate from the user store.

Please note that you might need to enable the checkbox to "Enable userid from SC" then choose which userid should be used, if you have multiple userid's associated with the key.
By mohitgupta153 - 4/17/2018 3:40:56 AM

Hi,
Thanks for the details. Can we install user certificate in the user certificate store which is generated and signed by root CA on Linux machine using OpenSSL? If yes, which certificate format should be good enough?
Or do we need to generate and sign Certificate on the windows machine to install it in user certificate store? My SSH server is running on Linux machine.

Thanks & Regards
Mohit Gupta
By Technical Support Group (TSG) - 4/17/2018 6:27:14 AM

 
mohitgupta153 - 4/17/2018 9:40:56 AM
Hi,
Thanks for the details. Can we install user certificate in the user certificate store which is generated and signed by root CA on Linux machine using OpenSSL? If yes, which certificate format should be good enough?
Or do we need to generate and sign Certificate on the windows machine to install it in user certificate store? My SSH server is running on Linux machine.

Thanks & Regards
Mohit Gupta

You must install the certificate on the client machine, which much be a Windows machine, since our client will only run on a Windows system and we will get the certificate from the local certificate store.
By mohitgupta153 - 4/17/2018 11:02:56 AM

 
Technical Support Group (TSG) - 4/17/2018 12:27:14 PM
 
mohitgupta153 - 4/17/2018 9:40:56 AM
Hi,
Thanks for the details. Can we install user certificate in the user certificate store which is generated and signed by root CA on Linux machine using OpenSSL? If yes, which certificate format should be good enough?
Or do we need to generate and sign Certificate on the windows machine to install it in user certificate store? My SSH server is running on Linux machine.

Thanks & Regards
Mohit Gupta

You must install the certificate on the client machine, which much be a Windows machine, since our client will only run on a Windows system and we will get the certificate from the local certificate store.

My question is, the certificate which will be installed on local certificate store on the client windows machine can be generated on Linux machine using OpenSSL? If yes., which certificate format should work well?
By Technical Support Group (TSG) - 4/17/2018 1:11:07 PM

You will need to generate a .pfx or .p12 key to be able to import into the Windows Certificate Store.