Secure Global Desktop Administration Guide > Security > How can I add my own flavor of certificate?

How can I add my own flavor of certificate?

By default, the Sun Secure Global Desktop Security Pack supports a number of certificate flavors from different Certificate Authorities. You can use a Base 64-encoded X.509 certificate from an unsupported Certificate Authority without extra configuration, but certificates are not validated and users are prompted to accept or decline the certificate. This is a potential security risk.

To permanently add a new certificate flavor and allow certificates to be validated without prompting the user, you must install the appropriate root certificate (or Certificate Authority's certificate) for that Certificate Authority.

On the Secure Global Desktop host, type:

tarantella security customca

Then, paste your root certificate in PEM format to standard input.

Users who log in to Secure Global Desktop using a web browser need do nothing.

Users of the Sun Secure Global Desktop Client and the Sun Secure Global Desktop Native Client must download and install the root certificate as follows:

• On Windows client devices, the root certificate can be imported using Internet Options in the Windows Control Panel.
• On UNIX/Linux/Mac OS X client devices, the Sun Secure Global Desktop Client and the Sun Secure Global Desktop Native Client look for the root certificate in the following locations:
  • the /etc/tarantella directory;
  • the user's $HOME/.tarantella/tcc/client_version directory;
  • the location specified in the user preferences file; or
  • for the Sun Secure Global Desktop Client only, the location specified by the -ca command-line argument.
• You can download the root certificate from the Sun Secure Global Desktop Native Client download page, available from http://server (you can also use https).

Copyright © 1997-2005 Sun Microsystems, Inc. All rights reserved.