Access: Adding a Client Certificate Account

The following describes how to add a new client certificate user account for the Software Appliance. Adding a new user account also allows you to remove the Initial OTP User to avoid security concerns.

You need to add at least one trusted CA (Certificate Authority) and the corresponding certificate before you can use a Client Certificate account.

Proceed as follows to create a new User Account for the Software Appliance:

1. Log in to your Software Appliance and open the Access page.

2. In the section User Accounts click Add User Account.
   
   

   

   
   
   

3. The corresponding form will open. Enter the required information.
4. For Authentication Type, select the option Client Certificate.
5. In Certificate Details the X.509 Match Type is already preselected.
   Default in the list and recommended match type is the Certificate serial number.
   

   

6. Specify the Match Value for the selected Match Type.

7. Click Add User Account to confirm your entries. The new User appears in the list of User Accounts.

   

   Notice!

   Since the virtualization platform is often managed by a different person than the Software Appliance, you should remove the Initial OTP user once you have created a new user account in order to avoid security issues. As you are currently logged in with the Initial OTP user account, you need to re-login using the newly added user account before removing the initial account.

8. Log out and then log back in with the newly created user account.
9. Remove the Initial OTP user to avoid security issues, see Setup Steps Overview: Step 2 - Remove the OTP User.

Secure account management

• The Software Appliance prevents you from locking yourself out of the system.
  For example:
  • The Remove button is only active if you can still log into the Software Appliance after removing the account.
  • For a client certificate account you need to add the correct Match Type for the first Match Value rule that you specify.