Is it possible to support 1 Certificate for each WLAN???

Hello all and thank you in advance for your assistance....
We are moving forward with a mobility project which requires our network to authenticate/authorize based on certificates. Here are the a couple of scenarios we need advice on...
Background: WLAN_1 has 802.1x enabled passing the cert through to the MS CA which authorizes the cred, which in turn passes the AD creds of the user to the MS RADIUS server for authenticate/authorization.
Hardware: WLC 5508 running 7.2.110.0 3600 APs ACS 5.2 not used for AAA
Issue/Questions...
1. As we turn up additional SSIDs, we need Mobile SSID to accept ONLY the Mobile Cert, our Internet SSID to only accept the Internal Cert and our GUEST SSID to deny ANY Cert issued by our CA.
I know ISE makes this much easier, but I dont have it and need this to work as best we can until next fiscal cycle....Any assistance is greatly appreciated

Stephen - please correct me if I am wrong -
WLC -
1. For the given SSID point the WLC to the ACS 5.2 server for AAA
ACS -
1. Define the WLC as a AAA client in ACS under Network Resources tab
2. Create an external ID store using Cert Auth Profile
- define the attribute to check (CN=)
3. Create a custom session condition to examine the Cert Dictionary for the Attribute CN=
4. Create a device filter for the WLC
5. Create an Authorization Network Access Authorization Profile
- however since I am only checking the cert I dont need any RADIUS values for Identity
6. Create access policy with authorization criterion for Cert Dict = cn = "value" result = Permit
Is this even close?

Similar Messages

Installing Secure Certificates for Acessing WLAN

We have a secure WiFi access network at our office.It uses a .der certificate for root and a .p12 certificate for individual users. I have a Nokia E51. Can you assist me as to how I can install these certificates and access the secure WiFi Lan in my workplace.

Hi,
first you would need to install the required certificates to the phone by using pc suite or memory card. Then at the office scan for the wifi networks and creat access point for your company's wifi. After access point is created, go to it's security settings and configure needed EAP settings for it. How to configure EAP depends on what EAP type your company's wifi is using.
2110i | 3110 | 6110 | 6210i | 9210i | N95

What does Creative Cloud Support include for each level?

What Support do I actually get with Creative Cloud for individual, for teams, and for enterprise? Phone? Chat? Email? I cannot figure it out from your website.

Hi Cfulbright94115,
For Creative Cloud we have Phone, Chat and Email support available. You may refer to below mentioned to get the support:
http://www.adobe.com/support/download-install/supportinfo/
Let us know if it helps,
Thanks!
Gurleen

Webtop Client has to accept security certificate at each login

Hello again,
another issue we currently are facing is that users who are connecting via the webtop client (btw the NC works way better, in ways of printing perfomance and login speed) have to accept the security warning EVERY time:
"The Secure Global Desktop server you're connecting to is using an untrusted or unrecognized security certificate.
Accept the certificate only if you are sure there is no security risk. If you are unsure, click Don't Accept and contact an Administrator (you won't be able to log in)...." and then it says "you are connecting for the first time blabla"...
This only happens when connecting to the classic Tarantella subsystem only, not to the SGD.
Any hints?
Regards
Joerg

Hello again,
another issue we currently are facing is that users
who are connecting via the webtop client (btw the NC
works way better, in ways of printing perfomance and
login speed) have to accept the security warning
EVERY time:
"The Secure Global Desktop server you're connecting
to is using an untrusted or unrecognized security
certificate.
Accept the certificate only if you are sure there is
no security risk. If you are unsure, click Don't
Accept and contact an Administrator (you won't be
able to log in)...." and then it says "you are
connecting for the first time blabla"...
This only happens when connecting to the classic
Tarantella subsystem only, not to the SGD.
Any hints?
Regards
JoergJoerg,
it'd be great to know which version of SSGD you're playing with.
I assume this is version 4.3x but assumptions do not always work :-)
If the above stands, the release notes for SSGD 4.31 say:
=== cut here === 8< ===
Protecting Clients Against Unauthorized Servers
As the SGD Client can now start and log in automatically, it is vital that users only
connect to a host that is trusted. In this release, users must explicitly authorize the
connection to SGD.
When a user connects to a SGD host for the first time, they see an Untrusted Initial
Connection warning message that asks them whether they really want to connect to
the host. The message displays the host name and fingerprint of the security
certificate for the server they are connecting to. Users should check these details
before clicking Yes. Once a user agrees to the connection, they are not prompted again
unless there is a problem.
To ensure that users only connect to SGD servers that are trusted, SGD
Administrators should do the following:
■ Provide users with a list of host names and fingerprints for the servers that are
trusted. Use the tarantella security fingerprint command on each
member of the array to obtain a list of fingerprints.
■ Explain to users the security implications of agreeing to connect to server.
In a fresh installation, each SGD host has its own self-signed security certificate.
Administrators should obtain and install a valid X.509 certificate for each SGD host.
Note � If you are using the classic webtop, the Java technology client prompts users
every time it connects to a SGD server. The SGD Native Client never prompts users.
=== cut here === 8< ===
I think the above note is important.
For testing, using OpenSSL I manually created a local CA and signed a Certificate Signing Request generated by SSGD (tarantella security certrequest...); once I imported both the SSGD server and the CA certificates into the browser, everything worked fine.
Hope this helps.
Best,
Rob

Quality Certificates for Finished Goods

Dear Friends,
Please guide me to map in SAP for the below Scenarios of Quality Certificates.
There are two types of Certificates for Finished Products
1. Permanent Certificates
We have certifications from some Institutes for Finished products.
e.g. TUV: IEC 61215 Ed.2, IEC 61730 & UL1703
These Certificates are sent to customers only on Demand.
I want to create all these certificates in SAP and assign materials to them. Print should come manually.
2. IV Testing Report (Certificates for each Product).
Each Product is tested by a machine for its efficiency and power. A Current-Voltage relationship Graph is produced by the Machine. We call it IV TESTING REPORT. Each product has its IV Testing Report and it is sent with the product to customers.
Print of this certificate should come automatically with each Billing Invoice in SD.
Regards
Prashant Atri

These requirements can all be handled by the standard SAP COA process. You simply have to create a couple of different SAP script forms. One for the stand COA where you report out the values where you actually test the product via your machine, (requirement 2).
For the frost requirement, you need to reproduce and send copies of outside certifications. I assume you actually have a paper copy of these and that these are for specific products. For these, you create separate COA outputs, one for each cert type. You create a SAPscript form for each. These forms will be identical with but one exception. In the form, instead setting it up for reporting characteristics and product info, you create it with one frame that is a bitmap. (your programmers should be familiar with doing this for putting on company logos on various forms). Instead of displaying a logo in those frame, you display the bitmap image of the cert you want to use. So the SAPcript is very easy, just a single bitmap along with anything else you decide you want to include on the form.
All your certs can then be sent automatically at time of delivery just like any regular COA.
FF

Exchange 2013 Certificates for Hybrid Deployment Clarification

I have an Exchange 2013 servers (CAS and Mailbox on separate server) which I wanted to setup for Hybrid deployment. I already have a certificate acquired from 3rd party with 3 names (mail, autodiscover and owa). the certificate was installed in the
CAS server. As per the hybrid deployment documentation I need also to install a certificate in the mailbox server, questions:
1. Can I use the same certificate for installation in the mailbox server?
2. Can I also use the same certificate in the Hybrid Configuration wizard for the "certificate to use with securing the hybrid mail transport"?
3. Do I need to include the primary smtp domain (xxxxx.com) in the certificate since current configuration points to the mail.xxx.com as the certificate common name?

Hi,
Here are my answers you can refer to:
1. It depends.
The certificate used for hybrid secure mail transport must be installed on all on-premises Exchange 2013 Mailbox and Client Access servers.
If you're configuring a hybrid deployment in an organization that has Exchange servers deployed in multiple Active Directory forests, you must use a separate third-party CA certificate for each Active Directory forest.
2. Yes. But we recommend that you use a dedicated third-party certificate for any optional AD FS server, another certificate for the Exchange services for your hybrid deployment, and if needed, another certificate on your Exchange servers for other needed
services or features.
3. Yes. Here are the minimum suggested FQDNs that should be included on certificates: domain.com, autodiscover.domain.com, edge.domain.com
For more information, you can refer to the following article:
http://technet.microsoft.com/en-us/library/hh563848(v=exchg.150).aspx
If you have any question, please feel free to let me know.
Thanks,
Angela Shi
TechNet Community Support

Problems installing SSL certificates for more than one alias on iMS 5.2

I have a problem to getting encyption on IMAP/HTTP/SMTP when they are on the same server. I only getting one SSL certificate installed by the Netscape console wizard, and therefore only one alias.
Let's say I have 3 aliases to the same server just for the scalability, imap.vxu.se, smtp.vxu.se and mail.vxu.se for http (https). Then I can only have one certificate installed at the same time, for example https://mail.vxu.se. And the others, like (S)IMAP I getting a dialouge that says the hostname doesnt is the same as the registred in the certificate. How do I solve this? Is there some possibillity to install more than ONE certificate, so I can have one certificate for each alias?
Environment: Full 420R, Solaris 8, iMS5.2
Thanks in advice

Although I completely agree the comments that suggestion this is not a great configuration idea, the error you are seeing ("...bean not found...") likely has nothing to do with the configuration - at least not as mentioned. My first guess is that if you are running the same exact form (FMX) as you ran for your first test then there should be no error. The only way such an error would appear is if the proper jar files are not being pulled to the client JRE or if the fmx was not properly generated. Be sure you are including config=webutil in the URL or that you have added the Webutil configuration info to your own named configuration section of formsweb.cfg
Regardless, if this is a Windows machine, the probability of having problems with multiple installations of the same version is high. Consider that the system PATH, CLASSPATH, ORACLE_HOME and various other system variables needed by the server side of the installation will overlap for each installation. This will cause problems. On the client side, attempting to download jars of the same name from the same server, but which are not actually the same files will confuse the JRE. If the JRE detects that a file which it has already cached is coming from the same server (host) then it will not attempt to pull it again. This will be a problem if the jars are not exactly the same in both installation. Making the problem worse is that you may not be able to easily determine from which installation the jars (or any files) were obtained.
So. as a general rule, regardless of whether multple installations can co-exist, I would not recommend it. This is especially true on a Windows platform.

SSL certificate for database

Hi all,
I want to know whether I need separate SSL certificate for each database on that server or can I take for the server and use it?
And also how to get SSL certificate for database form Godaddy?
Any help would be great.
Thanks
Rajitha
--------------------------------------------------------------------------------

Pl refer to Oracle® Database Advanced Security Administrator's Guide
10g Release 2 (10.2) from Oracle documentation.
You will find useful information on that related to this.
Dilipkumar Patel.

Ssl certificates for a clustered environment

Hi all,
I have a rather large domain in one environment with one Admin Server and 6 Managed Servers.
The Managed Servers are split on two physical machines with the first machine holding the Admin Server as well.
Each pair of servers is joined in a cluster, so I have 3 clusters, each hosting one application.
Now some of the communication needs to be done over ssl and I'm wondering about the configuration. First of all I should
note that these certificates won't be seen by a client (browser), they will only be used for internal application communication.
So, do I need one certificate for each managed server for his identity keystore? Or can I use the same certificate for all of them?
They will all be accessible under the same url, under a couple of layers of routers. If I use the same certificate can I use the one on the
router, which the clients see as well? Can I or Must I?

You only need to tell nodemanager where to find its certs. If you've already chosen SSL for your nodemanager, then by default it uses the democerts that come with WL. But you really don't want to use those...
So in your nodemanager properties, use something like:
# SSL Configuration
KeyStores=CustomIdentityAndJavaStandardTrust
CustomIdentityAlias=your_cert_alias
CustomIdentityKeyStoreFileName=full_path_to_your_identity_keystore_used_by_your_mgd_server
CustomIdentityKeyStorePassPhrase=your_storepass
CustomIdentityKeyStoreType=jks
CustomIdentityPrivateKeyPassPhrase=your_keypass
This tells your nodemanager to use the same identity as your managed servers. Since it's using java standard trust, it shares the same "cacerts" as the app server. In the console, your Machine -> Configuration -> Node Manager -> Type would be SSL.
So that would be all that's required for the nodemanager.
In your trust keystore, you can just add the signer / root ca cert for your certs, or you can add the individual server certs if you want to restrict the trust a little further. Normally identity certs expire more frequently than root certs, so I don't put identity certs into the trust store since it just means more maintenance when they expire.

SSL Certificates for installing SharePoint 2013

How many SSL certificates do we need in order to install SharePoint in a production farm?
We are planning to have OWA server farm, a workflow farm and APPS.
V

You need to plan what URL you will have which will work on https. below are few examples
1. Your OWA is recemmonded for https:
2. If you want your SharePoint site then it can also be on SSL
3. If your site on SSL then your apps URL should also be on SSL or might face some issue(assumption)
Here you can purchase a Wildcard certificate(*.domainame.com) then only 1 certificate will surfice all needs
Or
You will need to but a different SSL for each URL. Major problem will be on every app will have a different URL with GUID so you cannot buy a different certificate for each APP.

Using StartTLS with IMAP connection to Exchange is giving me different certificates for machines different to the IMAP server, security exception each time

I'm using Thunderbird with my work email account, which is using Exchange, this is not officially supported but access is allowed via IMAP.
The problem is when I'm using StartTLS or SSL I'm getting multiple different self signed certificates being returned, seeming depending on which specific backend server is handling the request, each time it causes the Confirm Security Exception dialog to be displayed. If I confirm the exception I get the dialog being displayed again until eventually I get a certificate that seems to match the first certificate I confirmed, at which point I can download or send my pending mail.
Thus is seems that there is only one certificate being stored as an exception for each server connection. Is there some way round this?
Thanks.

What is the reason for the exception prompt in the first place?

Is it possible to display the document link for each record in Report ?

Hi,
     Is it possible to display the document or Image link for each master record in the Report with the help of RSA1->Document->Master Data.
Usefull answers are really helpfull.
Advance Thanks for the userful answers.
Regards,
MRC.

Hi JAYASHREE PARASMAL ,
      Thanks for your valuable answers.
      Now i got the document in my Report,while executing the report through query designer as per your suggestion done on Setting Tab option.
      But i can't able to get the same thing,while i executing the Repory through WAD.
      What setting i need follow in the WAD for getting the same thing.
      Kindly give your suggestion to get the document in my Report,while i am executing through my WAD.
      Once again thanks for your helpful answer and awaiting for your suggestion.
Regards,
MRC.

Is it possible to use single ssl certificate for multiple server farm with different FQDN?

Hi
We generated the CSR request for versign secure site pro certificate
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;}
SSL Certificate for cn=abc.com considering abc.com as our major domain. now we have servers in this domain like www.abc.com, a.abc.com , b.abc.com etc. we installed the verisign certificate and configured ACE-20 accordingly for ssl-proxy and we will use same certificate gerated for abc.com for all servers like www.abc.com , a.abc.com , b.abc.com etc. Now when we are trying to access https//www..abc.com or https://a.abc.com through mozilla , we are able to access the service but we are getting this message in certfucate status " you are connected to abc.com which is run by unknown "
And the same message when trying to access https://www.abc.com from Google Chrome.
"This is probably not the site you are looking for! You attempted to reach www.abc.com, but instead you actually reached a server identifying itself as abc.com. This may be caused by a misconfiguration on the server or by something more serious. An attacker on your network could be trying to get you to visit a fake (and potentially harmful) version of adgate.kfu.edu.sa. You should not proceed"
so i know as this certficate is for cn=abc.com that is why we are getting such errors/status in ssl certficate.
Now my question is
1. Is is possible to remove above errors doing some ssl configuration on ACE?
2. OR we have to go for VerisgnWildcard Secure Site Pro Certificate for CSR generated uisng cn =abc.com to be installed on ACE and will be used for all servers like www.abc.com , a.abc.com etc..
Thanks
Waliullah

If you want to use the same VIP and port number for multiple FQDNs, then you will need to get a wildcard certificate. Currently, if you enter www.abc.com in your browser, that is what the browser expects to see in the certificate. And right now it won't beause your certificate is for abc.com. You need a wildcard cert that will be for something like *.abc.com.
Hope this helps,
Sean

How to Get Missing Dates for Each Support Ticket In My Query?

Hello -
I'm really baffled as to how to get missing dates for each support ticket in my query. I did a search for this and found several CTE's however they only provide ways to find missing dates in a date table rather than missing dates for another column
in a table. Let me explain a bit further here -
I have a query which has a list of support tickets for the month of January. Each support ticket is supposed to be updated daily by a support rep, however that isn't happening so the business wants to know for each ticket which dates have NOT been
updated. So, for example, I might have support ticket 44BS which was updated on 2014-01-01, 2014-01-05, 2014-01-07. Each time the ticket is updated a new row is inserted into the table. I need a query which will return the missing dates per
each support ticket.
I should also add that I DO NOT have any sort of admin nor write permissions to the database...none at all. My team has tried and they won't give 'em. So proposing a function or storable solution will not work. I'm stuck with doing everything
in a query.
I'll try and provide some sample data as an example -
CREATE TABLE #Tickets
TicketNo VARCHAR(4)
,DateUpdated DATE
INSERT INTO #Tickets VALUES ('44BS', '2014-01-01')
INSERT INTO #Tickets VALUES ('44BS', '2014-01-05')
INSERT INTO #Tickets VALUES ('44BS', '2014-01-07')
INSERT INTO #Tickets VALUES ('32VT', '2014-01-03')
INSERT INTO #Tickets VALUES ('32VT', '2014-01-09')
INSERT INTO #Tickets VALUES ('32VT', '2014-01-11')
So for ticket 44BS, I need to return the missing dates between January 1st and January 5th, again between January 5th and January 7th. A set-based solution would be best.
I'm sure this is easier than i'm making it. However, after playing around for a couple of hours my head hurts and I need sleep. If anyone can help, you'd be a job-saver :)
Thanks!!

CREATE TABLE #Tickets (
TicketNo VARCHAR(4)
,DateUpdated DATETIME
GO
INSERT INTO #Tickets
VALUES (
'44BS'
,'2014-01-01'
INSERT INTO #Tickets
VALUES (
'44BS'
,'2014-01-05'
INSERT INTO #Tickets
VALUES (
'44BS'
,'2014-01-07'
INSERT INTO #Tickets
VALUES (
'32VT'
,'2014-01-03'
INSERT INTO #Tickets
VALUES (
'32VT'
,'2014-01-09'
INSERT INTO #Tickets
VALUES (
'32VT'
,'2014-01-11'
GO
GO
SELECT *
FROM #Tickets
GO
GO
CREATE TABLE #tempDist (
NRow INT
,TicketNo VARCHAR(4)
,MinDate DATETIME
,MaxDate DATETIME
GO
CREATE TABLE #tempUnUserdDate (
TicketNo VARCHAR(4)
,MissDate DATETIME
GO
INSERT INTO #tempDist
SELECT Row_Number() OVER (
ORDER BY TicketNo
) AS NROw
,TicketNo
,Min(DateUpdated) AS MinDate
,MAx(DateUpdated) AS MaxDate
FROM #Tickets
GROUP BY TicketNo
SELECT *
FROM #tempDist
GO
-- Get the number of rows in the looping table
DECLARE @RowCount INT
SET @RowCount = (
SELECT COUNT(TicketNo)
FROM #tempDist
-- Declare an iterator
DECLARE @I INT
-- Initialize the iterator
SET @I = 1
-- Loop through the rows of a table @myTable
WHILE (@I <= @RowCount)
BEGIN
-- Declare variables to hold the data which we get after looping each record
DECLARE @MyDate DATETIME
DECLARE @TicketNo VARCHAR(50)
,@MinDate DATETIME
,@MaxDate DATETIME
-- Get the data from table and set to variables
SELECT @TicketNo = TicketNo
,@MinDate = MinDate
,@MaxDate = MaxDate
FROM #tempDist
WHERE NRow = @I
SET @MyDate = @MinDate
WHILE @MaxDate > @MyDate
BEGIN
IF NOT EXISTS (
SELECT *
FROM #Tickets
WHERE TicketNo = @TicketNo
AND DateUpdated = @MyDate
BEGIN
INSERT INTO #tempUnUserdDate
VALUES (
@TicketNo
,@MyDate
END
SET @MyDate = dateadd(d, 1, @MyDate)
END
SET @I = @I + 1
END
GO
SELECT *
FROM #tempUnUserdDate
GO
GO
DROP TABLE #tickets
GO
DROP TABLE #tempDist
GO
DROP TABLE #tempUnUserdDate
Thanks,
Shridhar J Joshi
<If the post was helpful mark as 'Helpful' and if the post answered your query, mark as 'Answered'>

XML DB: is it possible to get a row for each element in a container element?

I have an XML document containing a container element (collection). If I query, using an XPath expression, the contained elements I get a row for each container element with the contained element concatenated. Is it possible to get a row for each contained element?
I run this simple query:
select extract(xmltype('<colors><color>Red</color><color>Green</color></colors>')
, '/colors/color/text()').getstringval() from dual
And get this result:
EXTRACT(XMLTYPE('<COLORS><COLOR>RED</COLOR><COLOR>GREEN</COLOR></COLORS>'),'/COL
RedGreen
1 row selected.
What I would like to have is:
Red
Green
2 rows selected.
Wishful thinking or possible? Many thanks!

Sure. This is where our XMLSequence() function comes in. It allows you to treat the top-level nodes in a nodeset as if they were rows in a table when combined with the TABLE() operator. Here's an example.
First, to make the SQL look a little cleaner, I like to define a function like this:
create or replace function testdoc return xmltype as
begin
return xmltype('<colors><color>Red</color><color>Green</color></colors>');
end;.
To break out the nodeset of <color> elements as a table, we use the following query:
select value(list_of_color_elements).extract('*/text()').getStringVal() as color
from TABLE( XMLSequence( extract(testdoc(),'/colors/color'))) list_of_color_elements.
Or, using the new-in-9.2 extractValue() operator so we don't have to remember the text() part:
select extractValue( value(list_of_color_elements), '.') as color
from TABLE( XMLSequence( extract( testdoc() ,'/colors/color'))) list_of_color_elements.
Here the TABLE(XMLSequence(...)) combo produces a table of XMLType, with one XMLType object in each row of the table.
In general, if the XMLType instance were coming from an XMLType table xmltab the query would look like this:
select extractValue( value(colors), '.') as color
from xmltab x, /* Important that this table comes earlier in the FROM clause! */
TABLE( XMLSequence( extract( value(x),'/colors/color'))) colors.
And if the XMLType were instead in a column of XMLType named doc in a table xmltab, then we would have the syntax:
select extractValue( value(colors), '.') as color
from xmltab x, /* Important that this table comes earlier in the FROM clause! */
TABLE( XMLSequence( extract( x.doc ,'/colors/color'))) colorsOnce you get the hang of it, you'll see that the combination of TABLE(XMLSequence()) to "shred" XML nodes into rows, and XMLAgg() to aggregate fragments of XML across multiple rows back into a single document, is quite powerful.

Is it possible to support 1 Certificate for each WLAN???

Similar Messages

Maybe you are looking for