New self signed certificate, how to mark as trusted for all users on clients

We have a new 10.8 server that we are currently using for iChat/Messages service. We have created a self signed certificate to encrypt the traffic to the Messages service since we have the service accessible for internet and phone users. We use network accounts and users need to log in on several different machines when in the office.
Can anyone suggest how to tell a client machine to trust the certificate for all users?
Currently, each user is asked to trust the certificate on each client they log into.
I have imported the server certificate into the client's system keychain in Kechain Access and asked it to trust the certificate for all items manually. This does not appear to allow all users to trust the certificate since subsequent users who have not yet trusted the certificate on the test client are still asked to confirm trust. When opening the iChat.app the users are still propmpted to verify the certificate which now indicates that it is trusted for all users.

Resolved.
- Drag certificate from verification dialog.
- Import into System Keychain
- Select certificate in System Keychain and select "i" button at bottom of window.
- Set all items to always trust.

Similar Messages

SNR License Issue. How Can I Disable SNR for all Users?

Hi,
I Have an issue with SNR on CUCM 10.5 and with assignement of license type
I have a cluster with 400 users.
200 users use ip phone 3905 and should be use an Essential License.
When system check for assignement of license type , itassign a Basic License instead of an Essential License, because it see that users have SNR Enabled.
All users in my system have SNR enabled, and I can not disable it. All my user have Enable Mobility unchecked, and all my phone have Device Mobility Off, but system however see SNR enable.
How can i disable SNR for all users? This is a feature that client don't need.
I dont' have a sufficent number of licenses for support all 3905 in Basic License.
thanks for help.
Andrea

Well actually, Mobile Identity wouldn't apply to a 3905 unless those phones had another line on a Dual-Mode device like an iPhone or Android phone. So unless you have either of those in your system you can scratch that idea. Someone else may chime in here and try to help a bit more as RD/RDP are the main SNR culprits.

How to create delivery device for all users ?

hi
help needed ...
i activated delivery tool
but i dont know how to create email devices for all users
is there any api / manual action
obiee version : Oracle Business Intelligence 10.1.3.4.1
thanks
yuval

Yuval..u need to setup SA System in RPD..
refer http://oraclebizint.wordpress.com/2008/04/25/oracle-bi-ee-101332-sa-system-subject-area-autoloading-profiles-and-bursting/

How to install plugin globaly (for all users) in Firefox13?

How to install plugin globaly (for all users) in Firefox13?

See also:
*https://developer.mozilla.org/en/Gecko_Plugin_API_Reference/Plug-in_Development_Overview#Installing_Plug-ins

ACS v5.2 - New Self Signed Certificate Not Showing In Browser

Hi
I have just renewed the self signed certificate on a v5.2 ACS and expiry date of 2013 is showing in the ACS GUI. However, when I start an ACS Admin session and view the certificate information in the browser it is showing the old expiry date of 2010. I have tried this in IE and Firefox and the certificate information is the same.
Is there a way I can get the browser to pick the new certificate ?
The screenshots show the difference (any advice would be appreciated)

from the screen shots it does seem to be configured OK
So I couple of suggestions
- restart browsers / clear browser cache
- if that fails consider a restart of ACS. Since this is certificate presented on web sessions maybe a restart of the web server is requried

Creating a self signed certificate - how do you set the 'storepass'

Hi, I'm trying to use the ADT to create an AIR 2.7 file, but it's the first time i've used the command line tool to build one and am having problems understanding the signing process.
I can generate a cert.p12 keystore file from within the flash IDE, and this asks for a password for the file (-storepass)
I can also use ADT to create a self-signed certificate from the command line, here you can specify the -keystore (cert location) and -keypass (password for the key in the store)
I cannot find a way of generating a self-signed certificate where you can specify both passwords though, one for the store (-storepass) and one for the key (-keypass).
This is a problem because when i go to package my AIR file using ADT it needs both passwords -storepass and -keypass before it can publish it.
Does anyone know how to generate a self-signed .p12 certificate and have control over both the keys...?
I have spent hours playing and searching now so may have the wrong end of the stick, could do with some help getting past this issue.
Thanks
Sean

There is only one password is required to package for ipa as far I know
Sample command:
C:\AdobeAIRSDK\bin\adt.bat -package -target ipa-test -storetype pkcs12 -keystore [KEYFILE].p12 -storepass [KEY PASSWORD] -provisioning-profile [MOBILE PROVISION FILE].mobileprovision [IPA NAME].ipa [XML FILE NAME].xml [SWF FILE NAME].swf Icon_29.png Icon_48.png Icon_57.png Icon_72.png Icon_512.png Default-Landscape.png Default-Portrait.png Default-PortraitUpsideDown.png Default-PortraitLandscapeLeft.png Default-PortraitLandscapeRight.png

How to set toolbar options for all users in Reader

Hi to everybody
I have istalled adobe acrobat reader on a PC and i'd like to hide the toolbar for all user (old and new users) of thes PC.
I'm using windows xp and acrobat reader 7.
I have try to chek the user's folder and system registry but i don't find anything usefull
How can I do that?
Thanks
Andrea

Hi to everybody
I have istalled adobe acrobat reader on a PC and i'd like to hide the toolbar for all user (old and new users) of thes PC.
I'm using windows xp and acrobat reader 7.
I have try to chek the user's folder and system registry but i don't find anything usefull
How can I do that?
Thanks
Andrea

Fast user switching menu - how do I have icons for all users?

I'm setting up a new computer for three users. I have enabled the fast user switching menu. I set the menu to 'Icon'. However, it only shows the icon for myself, the admin. For the other two accounts, when they log in it remains as their (rather long) real names. The same thing happens if I select 'Account Name': it only shows the 'Account Name' for myself. When I switch to the other users, it is still their real name.
How can I have icons (or account names) for ALL users??

See CCK Wizard: https://addons.mozilla.org/firefox/addon/cck/
You can use a mozilla.cfg file in the Firefox program folder to lock prefs or specify new (default) values.
Place a file local-settings.js in the defaults\pref folder where you also find the file channel-prefs.js to specify using mozilla.cfg.
pref("general.config.filename", "mozilla.cfg");
pref("general.config.obscure_value", 0); // use this to disable the byte-shift
See:
*http://kb.mozillazine.org/Locking_preferences
These functions can be used in the mozilla.cfg file:
defaultPref(); // set new default value
pref(); // set pref, but allow changes in current session
lockPref(); // lock pref, disallow changes

How do you configure Firefox for all users on a machine?

I want to
1. Take my existing set-up of Firefox
a. with all bookmarks
b. with all my chosen options
c. with my default start-up home page
d. bypass all the initial Firefox startup screen and "make this your default screen"
2. Have it be the base set-up for all users that log into a machine on our domain.
Is there a config file? Where do I place this config file so when all open their firefox it takes the above settings. I am creating a base image using VMware and will want this set-up so when a user log in with their logon credentials and open Firefox, it already has the above mentioned settings in place.

See CCK Wizard: https://addons.mozilla.org/firefox/addon/cck/
You can use a mozilla.cfg file in the Firefox program folder to lock prefs or specify new (default) values.
Place a file local-settings.js in the defaults\pref folder where you also find the file channel-prefs.js to specify using mozilla.cfg.
pref("general.config.filename", "mozilla.cfg");
pref("general.config.obscure_value", 0); // use this to disable the byte-shift
See:
*http://kb.mozillazine.org/Locking_preferences
These functions can be used in the mozilla.cfg file:
defaultPref(); // set new default value
pref(); // set pref, but allow changes in current session
lockPref(); // lock pref, disallow changes

How to set permissions like "For all users" with Sandbox

Hello!
Hello!
I am using Sandbox for Mac OS X Leopard and I've got a question to you:
How can I set up a folder to behave like the For all users folder in the users directory?
Greetings

Well, sandbox sets ACL's not posix permissions. The sticky bit is a posix permission. Sand box will allow you to do something similar to the sticky bit using ACL's, but the exact duplication of the sticky bit is not possible, but something just as useful or more useful can be easily implemented.
To set the sticky bit you will need an app called FileXaminer or the Terminal.app command line.
to set the sticky bit simply put "1" in front of the the permissions number when you run chmod on the command line, here is an example:
chmod 1775 /users/data/shared #assigns permissions 775 and the sticky bit#
chmod 775 /users/data/shared #assigns permissions 775 without the sticky bit#
note: note actual use of the chmod and chown commands will, in most cases require the sudo (super user do) command to be used with them. example:
sudo chmod 1775 /users/data/shared #assigns temporary super user priviledge#
The way I set my shared user's directories with ACL's is this:
first I created folder /users/data -permissions=777 (everyone).
I had three users so I created folders for each in /users/data:
/users/data/user1 #this is just example-substitute real user name#
/users/data/user2
/users/data/user3 #etc,etc,#
set the posix permission on each user folder 700 (owner:read,write,execute)
set the owner and group on each one accordingly:
chown user1:staff /users/data/user1 #substitute real user name#
chown user2:staff /users/data/user2
chown user3:staff /users/data/user3 #(etc,etc)#
Now each user has their own data folder they can read and write to at will (when they are logged in to their user account).
They can safely create and maintain their data and no one can delete it.
Since these are shared data accounts. other users will need to read the data, this is where the ACL's come in.
You will need to use Sandbox to place ACL's for each allowed user, on each of the user directories:
0: user:joe inherited allow list,addfile,search,add_subdirectory,readattr,writeattr,readextattr,writeextattr,readsec urity,file_inherit,directoryinherit
1: user:mary inherited allow list,addfile,search,add_subdirectory,readattr,writeattr,readextattr,writeextattr,readsec urity,file_inherit,directoryinherit
2: user:sue inherited allow list,addfile,search,add_subdirectory,readattr,writeattr,readextattr,writeextattr,readsec urity,file_inherit,directoryinherit
Basically with the above ACL's the only thing the allowed user can't do is delete files. They can copy files, they can add files, etc. This behavior is somewhat similar to what can be accomplished with the sticky bit, but much more controlled and structured. That is the beauty of using ACL's.
Using SandBox you can taylor the permissions as you see fit for each every user. You can set permissions for an administrator to delete files as well. You can take away or add permissions for each user as you see fit. let your imagination be your guide.
ACL's weren't meant to replace posix permissions, but rather to allow administrators to fine tune user permissions.
Kj

SBS2008 Self signed certificate renewal: Root CA not trusted by clients

Following the prompt from the Critical Event emails, namely:
Title: Leaf certificate expiring
Source: Networking - Certificate
Description: The certificate that is helping to secure your Web site traffic will expire in less than two weeks. Before then, run the Fix My Network Wizard from the Connectivity subtab on the Network page of the Windows SBS Console.
Now all the domain clients are popping-up certificate errors when launching outlook and get certificate warnings on internal access to RWW or OWA. Internal client access to the latter generates a warning about the Root CA certificate not being trusted
(the remote.domainname is OK). The Root CA has been created today as part of the FMNW (log shows this step). Running the certificate install package on the client solves this OK, but I thought that was unnecessary on domain joined machines?
I can push out the certificate via GPO to sort this, but would appreciate any feedback on whether this is "expected behaviour" from the FMNW
Thanks

Hi,
I’m glad to hear that you have resolved the issue and thanks for sharing your solution in the forum. This will help others who face the same scenario resolve the issue quickly. If there is
anything else I can do for you, please do not hesitate to let me know. I will be very happy to help.
Best Regards,
Andy Qi
TechNet Subscriber Support
If you are
TechNet Subscription user and have any feedback on our support quality, please send your feedback
here.
Andy Qi
TechNet Community Support

How to migrate the calendars for all users?

At work we have two Mac servers, both running Mountain Lion. I'm looking for a way to migrate the calendars for all the users from server A to server B. I've recreated all the users on the new server, as there are problems with most users on the old server.
I've seen some topics covering backing up calendar data on the server and seen some PostgreSQL related, but nothing seems to apply to Mountain Lion. How do I create a PostgreSQL dump of the calendars? I know I will have to edit the GUID's to make it work on the new server. Or is it as simple as copying the data from /Library/Server/Calendar and Contacts/ to the same location on the new server?

At work we have two Mac servers, both running Mountain Lion. I'm looking for a way to migrate the calendars for all the users from server A to server B. I've recreated all the users on the new server, as there are problems with most users on the old server.
I've seen some topics covering backing up calendar data on the server and seen some PostgreSQL related, but nothing seems to apply to Mountain Lion. How do I create a PostgreSQL dump of the calendars? I know I will have to edit the GUID's to make it work on the new server. Or is it as simple as copying the data from /Library/Server/Calendar and Contacts/ to the same location on the new server?

How to disable registration screen for all users

Hi, can someone advice how I can disable the registration screen when user first startup Acrobat? I am using Acrobat 9
Thanks

I don't know if you can. Try this.
Make a copy of the registry.
Make a new copy of the registry after registering.
Try to find the difference in the files after comparing registries. Then change the registry for all future installations.

How to create a shortcut for all users in Win 7 and Win 8?

Hi,
I'll trying to make a script that will create a shortcut in every user profile account in a computer. I stumble upon the script below from
http://gallery.technet.microsoft.com/scriptcenter/Create-shortcut-in-your-11cfd3de/view/Discussions#content.
Option Explicit
On Error Resume Next
Dim objShell
Dim objDesktop
Dim objLink
Dim strAppPath
Dim strWorkDir
Dim strIconPath
strWorkDir ="C:\Program Files\Microsoft Office\Office15"
strAppPath = "C:\Program Files\Microsoft Office\Office15\ORGCHART.EXE" 'you have to use your URL to Interanet site or path to specific program
'strIconPath = "\\server\Xyz.ico" 'specify the path to the icon please change to your valid path
Set objShell = CreateObject("WScript.Shell")
'objDesktop = objShell.SpecialFolders("Desktop")
Set objLink = objShell.CreateShortcut("C:\Users\%userprofile%\Desktop\Org_chart_test.lnk") 'change here To your shortcut name
objLink.Description = "this is a test" 'replaec with your description
'objLink.IconLocation = strIconPath
objLink.TargetPath = strAppPath
objLink.WindowStyle = 3
objLink.WorkingDirectory = strWorkDir
objLink.Save
I did some modifications to cater to my need. Now the question is, how can I make the script create a shortcut for every user profile from the script above?
Any inputs would be greatly appreciated.
Thanks!

You could create the shortcut at one machine, then copy it to the target as part of the logon script. Note also that this line contains an error:
"C:\Users\%userprofile%\Desktop\Org_chart_test.lnk"
It should read:
"%userprofile%\Desktop\Org_chart_test.lnk"

How to add certificate in mac os x lion for all users

Hi hello
I want just add certificate in the session Admin, but i want when one user connect in her session can have this certificate
thanks for reply

It's already installed. To start it, run the following shell command:
sudo launchctl load -w /System/Library/LaunchDaemons/org.postgresql.postgres_alt.plist
There is a lot more that needs to be done to make it useful for anything, but that's beyond the scope of this forum.

New self signed certificate, how to mark as trusted for all users on clients

Similar Messages

Maybe you are looking for