[RESOLVED] Assigning a certificate to a WAPT Administrator account

[fobrian]

Hello,
I have a question regarding assigning a certificate to an Administrator account created from the WAPT console.
Specifically, if I want to assign a certificate to a newly created user account, which certificate should I select?

Would it be, for example, the one located in the "C:\Program Files (x86)\wapt\ssl" directory of an already configured machine?

I tried to find information in the online documentation but only found this page: https://www.wapt.fr/fr/doc-2.5/wapt-sec ... e.html#acl

Thank you in advance for your help and patience, as I'm a recent beginner with WAPT.

Fred

[blemoigne]

Hello Fred,
We recommend creating a unique certificate for each user for better traceability. Ideally, the steps should be as follows:

• The new administrator creates their own named certificate (stored by default in c:\users\username\private).

• It provides the public certificate (.crt) to an administrator already in place so that the latter can deploy it on the network via a certificate package.

• Association of the certificate with the user in the ACLs window of the WAPT Console.

I hope I have answered all your questions!
Bertrand

[fobrian]

Hello Bertrand,

Thank you for your reply.
From what I understand, you do indeed need to log in once with the account to which you want to assign the certificate, and then create a new key from that window.

Fred

[fobrian]

Hello,

I'd like to follow up on this post.
This might be a silly question, but once the new Administrator has created their own certificate, when associating the certificate with the Administrator from the "WAPT User and Rights Management" window, which certificate should be selected?
Is it the server's primary CA certificate that needs to be entered?



Because if I use this new user's personal ".crt" file, they don't have full rights to manage the workstations.

Thanks in advance.

Fred

[fobrian]

Hello,

I finally found a solution.
Indeed, we needed to use the WAPT CA certificate located on our network share, and not the local one.

Fred

[dcardon]

Hi Frédéric,

thanks for the feedback, I'm marking the topic as resolved.

Denis