[THIN] Re: Question about Citrix Secure Gateway 2.0 and certificates...
- From: "Lucas Boyken" <lboyken@xxxxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Thu, 5 Jun 2003 14:38:53 -0500
Microsoft SMS...
SMS + Money =3D Solution
Lucas W. Boyken
Computer Systems Associates
Account Manager / Technical Representative
lboyken@xxxxxxxxx
Company Phone: 800.222.7601
Office Phone: 515.332.2751
Fax: 515.332.5687
-----Original Message-----
From: Stansel, Paul [mailto:Paul.Stansel@xxxxxxxxxxxxx]=20
Sent: Thursday, June 05, 2003 12:01 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Question about Citrix Secure Gateway 2.0 and
certificates...
That's the way we do it, and it is a major pain. Different OSes handle
the installation of a trusted root CA differently, and it causes
problems every time a new user is added. It is also a pain if they go
to, say, an internet cafe where the PCs are so locked down that they
don't have the right to add the cert. On the plus side, we did save (a
little) money.
-Paul
> ----------
> From: Jim Hathaway[SMTP:JimH@xxxxxxxxxxxxxxx]
> Reply To: thin@xxxxxxxxxxxxx
> Sent: Thursday, June 05, 2003 12:58 PM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: Question about Citrix Secure Gateway 2.0 and
> certificates...
>=20
> Matt,=3D20
>=20
> The only way to do this with custom certificates (say from an MS cert
> server) is by getting the connecting client's to trust the MS cert=20
> authority. You can make that available via another webpage, or e-mail=20
> it to your users for installation on the machines they'll need to=20
> connect with. But there is no way nativly within the 2.0 model of CSG=20
> to allow client's to 'automaticly trust' a custom cert provider, it's=20
> more of an MS issue than anything else.=3D20
>=20
> 3rd party certs, from verisign, geotrust, thawte . . Etc. Do make this
> whole process a great deal easier, but if your company can't afford to
> cough up $600.00 or so for 2 web certs, than you'll have to go through
> the pain of getting all remote client's to trust your MS based cert=20
> server.
>=20
> It is doable . . But it's also rather annoying. On the plus side=20
> though, once setup, there is some extra security with private certs in
> that any remote connection that does not trust your Cert provider=20
> can't connect to the farm remotely. Where as with 3rd party certs, all
> that's needed generally for a remote connection is a user name and=20
> password.=3D20
>=20
> HTH
>=20
> J
>=20
> -----Original Message-----
> From: Matt McComas [mailto:Matt.McComas@xxxxxxxxxxxxxx]=3D20
> Sent: Thursday, June 05, 2003 9:31 AM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Question about Citrix Secure Gateway 2.0 and=20
> certificates...
>=20
>=20
> Is there a way to automatically download a custom certificate using=20
> Citrix Secure Gateway 2.0 for access to a Metaframe XP farm? The=20
> documentation suggests that the only solution is to manually install=20
> the certificate. Surely there must be a way to automate this process.=20
> (You'll have to forgive me...I'm kind of new to certificate services.)
> If someone could point me to a resource other than the CSG=20
> Administrator's Guide and Microsoft's explanation, that would be=20
> great. Would this whole process be easier if we used a third party=20
> certificate authority?? Thanks!!!
>=20
> Matt
>=20
>=20
> ********************************************************
> This Week's Sponsor - Appsense Technologies
> New! AppSense Optimizer is a new product from AppSense=3D20 designed =
to=20
> increase the user capacity of your servers.=3D20=20
> http://www.appsense.com/
> **********************************************************
> Useful Thin Client Computing Links are available at:=20
> http://thethin.net/links.cfm
>=20
> For Archives, to Unsubscribe, Subscribe or=3D20
> set Digest or Vacation mode use the below link:=20
> http://thethin.net/citrixlist.cfm
> ********************************************************
> This Week's Sponsor - Appsense Technologies
> New! AppSense Optimizer is a new product from AppSense
> designed to increase the user capacity of your servers.=20
> http://www.appsense.com/
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thethin.net/links.cfm
>=20
> For Archives, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://thethin.net/citrixlist.cfm
>=20
********************************************************
This Week's Sponsor - Appsense Technologies
New! AppSense Optimizer is a new product from AppSense=20
designed to increase the user capacity of your servers.=20
http://www.appsense.com/
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
********************************************************
This Week's Sponsor - Appsense Technologies
New! AppSense Optimizer is a new product from AppSense
designed to increase the user capacity of your servers.
http://www.appsense.com/
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
Other related posts:
