Manage Client Certificates with Artica

• Back to the Client Certificate main section

If you haven't yet deployed client certificates on your users' workstations, Artica can generate certificates for you.
Important updates have been made since version 4.50 Service Pack 1 or Hotfix 20231029-02, so be sure to use this version. 

Create the Server Certificate for the Client verification.

• Select your website, down to the section and click on Client-Side certificate

• Click on the Wizard button

• A new popup is displayed and allows you to change the certificate name and the expiration time in days.
• Click on Create button

• Your server certificate for Client-side verification is created and your reverse-proxy checks certificate clients.
  If you want to only verify parts of your website, not the whole website, turn on the Optional option.

Create Client certificates

The technology simply checks whether the client browser stores the client certificate for your website.
As a result, you can generate a single client certificate and deploy it on all your users' computers.

This method is very simple, but it won't allow you to identify users.
A more restrictive method is to generate a single certificate for each user. 
Under these conditions, you can identify each user workstations and record access events to your website by user .

Alternatively, your web application can filter access according to the identifier stored in the certificate, ensuring maximum security.

To facilitate this authentication method , Artica offers a dedicated section “Client Certificates” in the left-hand menu.

• This section lists the server certificates you have created for your websites and allows you to create and download client certificates in PFX format.
• Click on the plus icon in order to create a client certificate.

• A windows popup is displayed and let you type an username that will be the string that will be added in the web server events.
• The expire in days is the certificate lifetime and the password is an optional field that crypt the PFX package with this password.
• Click on Create button

• You'll find the client certificate in the list. 
  Click on the button in the PFX column to download the certificate and install it in your browser.