If you haven't yet deployed client certificates on your users' workstations, Artica can generate certificates for you.
Important updates have been made since version 4.50 Service Pack 1 or Hotfix 20231029-02, so be sure to use this version.
¶ Create the Server Certificate for the Client verification.
- Select your website, down to the section and click on Client-Side certificate
- Click on the Wizard button
- A new popup is displayed and allows you to change the certificate name and the expiration time in days.
- Click on Create button
- Your server certificate for Client-side verification is created and your reverse-proxy checks certificate clients.
If you want to only verify parts of your website, not the whole website, turn on the Optional option.
¶ Create Client certificates
The technology simply checks whether the client browser stores the client certificate for your website.
As a result, you can generate a single client certificate and deploy it on all your users' computers.
This method is very simple, but it won't allow you to identify users.
A more restrictive method is to generate a single certificate for each user.
Under these conditions, you can identify each user workstations and record access events to your website by user .
Alternatively, your web application can filter access according to the identifier stored in the certificate, ensuring maximum security.
To facilitate this authentication method , Artica offers a dedicated section “Client Certificates” in the left-hand menu.
- This section lists the server certificates you have created for your websites and allows you to create and download client certificates in PFX format.
- Click on the plus icon in order to create a client certificate.
- A windows popup is displayed and let you type an username that will be the string that will be added in the web server events.
- The expire in days is the certificate lifetime and the password is an optional field that crypt the PFX package with this password.
- Click on Create button
- You'll find the client certificate in the list.
Click on the button in the PFX column to download the certificate and install it in your browser.
