5-7
Cisco Secure Desktop Configuration Guide
OL-8607-02
Chapter 5 Setting Up CSD for Microsoft Windows Clients
Defining Location Criteria
Using the Certificates in Your Store to Specify Certificate Criteria
To specify certificate criteria if you have neither a certificate file nor a signed file, go to the certificates
in your store (your computer) to retrieve the data you need, as follows:
Step 1 Open the Control Panel.
Step 2 Choose Internet Options.
Step 3 Click the Content tab.
Step 4 Click Certificates.
Step 5 Choose a certificate and click View.
The Certificate window opens.
Step 6 Click the Details tab.
Step 7 Complete both of the fields in the “Certificate Criteria” area of the Identification for <Location> pane
(Figure 5-2), as follows:
–
Issued By—Click Subject in the Field column under the Details tab of the Certificate window.
The area below the Field column displays the subordinate fields and values assigned to the
Subject field of the certificate. The subordinate fields include such names as “CN” for common
name, “O” for organization unit name, and “E” for e-mail address. Type the value of one of these
subfields in the Issued By field on the Identification for <Location> pane to match it against
the Subject field of the certificate.
Note Specify the value of the subfield. For example, type the value of the “O” field, not the “O” itself.
–
Issued To—Click Issuer in the Field column under the Details tab of the Certificate window.
The area below the Field column displays the subordinate fields and values assigned to the
Issuer field of the certificate. The subordinate fields include such names as “CN” for common
name, “O” for organization unit name, and “E” for e-mail address. Type the value of one of these
subordinate fields in the Issued To field on the Identification for <Location> pane to match it
against the Issuer field of the certificate.
CSD assigns the location to the client only if it has a certificate that contains both of the following, and
only if it matches at least one criterion in each of the completed areas in the Identification for
<Location> pane:
• Value in the Subject field that matches the value you specified in the “Issued By” field
• Value in the Issuer field that matches the value you specified in the “Issued To” field
IP Criteria
Check Enable identification using IP criteria in the Identification for <Location> pane (Figure 5-2)
to use the IP address of the remote client PC as a criterion for assigning a location to the remote client,
then click Add to enter one or more IP address ranges.
CSD checks the IP addresses of remote client PCs trying to connect. If a client has an address within the
specified range, CSD assigns the properties of the location to the remote client.
To Next Page
Loading...
Need help?
General