Connecting to the Host System
Client Certificate ----
These parameters specify the type of Client Certificate to use if any. Enable Secure Sockets Layer on the Security tab must be enabled in order for Client Certificate support to be active.
No Client Certificate - Specifies that a client certificate should not be presented.
Client Certificate in Disk File - Specifies that a client certificate should be presented.
Certificate File - Specifies the path to the Certificate File.
View - Use the View button to view the certificate.
Browse - Use the Browse button to locate the Certificate File.
Private Key File - Specifies the path to the Private Key File.
Browse - Use the browse button locate the Private Key File.
Client Certificate in Certificate Store - Specifies that a client certificate should be presented that is located in the Certificate Store.
Common Name - Specifies the path to the Common Name File.
View - Use the View button to view the certificate.
Browse - Use the browse button to display a list of certificates in the Certificate Store.
Client Certificate in Certificate on Smart Card - Specifies that a client certificate stored on a Smart Card should be presented. - This feature is currently not implemented.
Root Certificates ----
These parameters specify the which Root Certificate store to use. The one provided by Openssl, or the one that is provided by Windows.
Use Openssl Root Certifcates - (Default) If selected, the Root Certificates provided by Openssl will be used.
Use Windows Root Certificates - If selected, BlueZone will look will look for a file called rootcerts.pem in the End User's bluezone\certs directory. If it doesn't exist, it will automatically export the root certificates from Windows and store them there, giving a message such as ''109 root certificates were exported.''
Update Root Certificates - This button is used to manually export the certificates. If you connect and are presented with an untrusted host root certificate, and check the box to add it to the trusted list, it will import it into the Windows root store (which may produce a Windows message asking for confirmation), and then export the root store again to disk producing a message such as ''109 root certificates were exported.'' When this is performed one time, subsequent connections should connect without messages.
Related Topics: