Auto Selecting A Certificate For Client Certificate Authentication
- Matthew Webb
- Mark Fenimore (Unlicensed)
Disclaimer
The information found below should be used in conjunction with security best practices to ensure that by automatically logging into a station, you are not putting your data or devices at risk. Be sure to (at minimum) set proper data access levels for the kiosk user account (i.e. Read Only within Category Services) and secure physical access to the data entry devices where possible (Mouse, Keyboard, Touchscreen, Etc.).
Issue 2: Auto Selecting A Certificate For Client Certificate Authentication
As part of the auto-login process on a kiosk, it could be desire-able to have the browser automatically select a certificate. This is useful if you have a process in which the browser auto-launches as part of a touch free startup.
Step 1:
- Ensure that your certificate that will be used for Client Certificate Authentication has been added into the browser trust store at Settings → Privacy and Security → Certificates → View Certificates. If it has not, please refer back to the docStationSecurity.pdf document as well as the previous article.
Step 2:
- From the Settings → Privacy and Security → Certificates area, select the "Select one automatically" option.
Step 3:
- Within Firefox, go to the URL of the device. You will likely need to click on "Log in with ClientCertAuth" the first time you visit the page.
Step 4:
- Select the proper certificate to authenticate with Niagara and click "Remember this decision".
This should now set your browser to automatically select the certificate when visiting this URL in the future.