[THIN] Re: Question about Citrix Secure Gateway 2.0 and certi ficates...

  • From: "Daniel Schoppmann" <dschoppmann@xxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Fri, 6 Jun 2003 00:02:43 +0200

Globalsign

http://www.globalsign.com/

175? each

Got some problems with backing up and restoring a certificate in W2K after
server rebuild, but support in Belgium gave me promotion code to send a new
certificate request. No my WI works again :-)

Ciao, Daniel

dschoppmann@xxxxxx
http://www.schoppmann.com/

Meeräckerstr. 24
68163 Mannheim

home: 0621/8191407
mobil:0172/6395617


-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On
Behalf Of Schaefer, Jay
Sent: Thursday, June 05, 2003 11:06 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Question about Citrix Secure Gateway 2.0 and certi
ficates...


I'm curious which 3rd party certs people are using?  I'm using trial certs
from verisign now and things are going well, but I've heard the others are
cheaper for the same cert type.

Jay

-----Original Message-----
From: Stansel, Paul [mailto:Paul.Stansel@xxxxxxxxxxxxx]
Sent: Thursday, June 05, 2003 12:01 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Question about Citrix Secure Gateway 2.0 and certi
ficates...


That's the way we do it, and it is a major pain.  Different OSes handle the
installation of a trusted root CA differently, and it causes problems every
time a new user is added.  It is also a pain if they go to, say, an internet
cafe where the PCs are so locked down that they don't have the right to add
the cert.  On the plus side, we did save (a little) money.

-Paul

> ----------
> From:         Jim Hathaway[SMTP:JimH@xxxxxxxxxxxxxxx]
> Reply To:     thin@xxxxxxxxxxxxx
> Sent:         Thursday, June 05, 2003 12:58 PM
> To:   thin@xxxxxxxxxxxxx
> Subject:      [THIN] Re: Question about Citrix Secure Gateway 2.0 and
> certificates...
>
> Matt,=20
>
> The only way to do this with custom certificates (say from an MS cert
> server) is by getting the connecting client's to trust the MS cert
> authority. You can make that available via another webpage, or e-mail it
> to your users for installation on the machines they'll need to connect
> with. But there is no way nativly within the 2.0 model of CSG to allow
> client's to 'automaticly trust' a custom cert provider, it's more of an
> MS issue than anything else.=20
>
> 3rd party certs, from verisign, geotrust, thawte . . Etc. Do make this
> whole process a great deal easier, but if your company can't afford to
> cough up $600.00 or so for 2 web certs, than you'll have to go through
> the pain of getting all remote client's to trust your MS based cert
> server.
>
> It is doable . . But it's also rather annoying. On the plus side though,
> once setup, there is some extra security with private certs in that any
> remote connection that does not trust your Cert provider can't connect
> to the farm remotely. Where as with 3rd party certs, all that's needed
> generally for a remote connection is a user name and password.=20
>
> HTH
>
> J
>
> -----Original Message-----
> From: Matt McComas [mailto:Matt.McComas@xxxxxxxxxxxxxx]=20
> Sent: Thursday, June 05, 2003 9:31 AM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Question about Citrix Secure Gateway 2.0 and
> certificates...
>
>
> Is there a way to automatically download a custom certificate using
> Citrix Secure Gateway 2.0 for access to a Metaframe XP farm?  The
> documentation suggests that the only solution is to manually install the
> certificate. Surely there must be a way to automate this process.
> (You'll have to forgive me...I'm kind of new to certificate services.)
> If someone could point me to a resource other than the CSG
> Administrator's Guide and Microsoft's explanation, that would be great.
> Would this whole process be easier if we used a third party certificate
> authority?? Thanks!!!
>
> Matt
>
>
> ********************************************************
> This Week's Sponsor - Appsense Technologies
> New! AppSense Optimizer is a new product from AppSense=20
> designed to increase the user capacity of your servers.=20
> http://www.appsense.com/
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thethin.net/links.cfm
>
> For Archives, to Unsubscribe, Subscribe or=20
> set Digest or Vacation mode use the below link:
> http://thethin.net/citrixlist.cfm
> ********************************************************
> This Week's Sponsor - Appsense Technologies
> New! AppSense Optimizer is a new product from AppSense
> designed to increase the user capacity of your servers.
> http://www.appsense.com/
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thethin.net/links.cfm
>
> For Archives, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://thethin.net/citrixlist.cfm
>
********************************************************
This Week's Sponsor - Appsense Technologies
New! AppSense Optimizer is a new product from AppSense
designed to increase the user capacity of your servers.
http://www.appsense.com/
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm

For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
********************************************************
This Week's Sponsor - Appsense Technologies
New! AppSense Optimizer is a new product from AppSense
designed to increase the user capacity of your servers.
http://www.appsense.com/
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm

For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm

********************************************************
This Week's Sponsor - Appsense Technologies
New! AppSense Optimizer is a new product from AppSense 
designed to increase the user capacity of your servers. 
http://www.appsense.com/
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm

Other related posts: