Configuring SEG v2 KCD certificate authentication

[Natico]

Hello,
after installing seg v2 only android devices are working while ios are not appearing in any log.
what i saw was certificate error (46) in wireshark.

while setting advanced MEM configuration and required to supply client certificate chain.
My clients get certificate from internal CA server using template now which certificate do i need to upload in this section?
tried giving it the intermediate cer file and i get password invalid.
when choosing root cert of the chain the mem gets it and show the details.

the SEG installation is used with thawte public ssl pfx file.

what am i missing?

Best Regards,
Netanel

[CharlesDrury]

What version AW console do you have installed

[Natico]

Hi Charles,
I installed SEG 2.2.3.2 and 2.3.0.1 tried them both
My Console version is 9.2.3.9 ONprem

[Natico]

issue is solved the certificate inside AW database was with password for some unknown reason.
i deleted the password and verify this cell is NULL now i can upload the cert and SEG started working just fine.

Regards,
Netanel

[MUHAMMADLUTFIMO]

Hi Netanel. How did you check whether the certificate in AW Database had password ? Would greatly appreciate the assistance. Thank you.

[ThomasCheng]

Hi all,
So based on this thread, it appears KCD is supported under SEG V2. Correct?
Anyone else running it successfully? I'm also interested in how to determine if the certificate in AW database has password.

[SebastianSchmut]

Hi Thomas,
some of our customer are running SEGv2 in combination with KCD. mostly it's much easier to implement with iOS rather than Android.
Most issues are related to domain and user configs. The user-upn doesn't match the domain-name. e.g user@company.de --> user@company.int

regards