Sonicwall DPI SSL certification

wannabecraig
wannabecraig used Ask the Experts™
on
HI
I'm just implementing a DPI inspection and I've download a key from my sonicwall firewall.
This cert. has been distributed to my PC over GPO.
How do I distribute the same cert to my MAC clients  ??
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
J SpoorTME / Network Security Evangelist

Commented:
Unfortunately MACs can not be GPO-Managed...

You will have to manually inject the certificate into the MACs

https://arstechnica.com/civis/viewtopic.php?t=1203535
https://pubs.vmware.com/flex-1/index.jsp?topic=%2Fcom.vmware.horizon.flex.admin.doc%2FGUID-9201A917-D476-40EF-B1F4-BBF14AB83D94.html

Or find a 3rd party software that can either manage the MACs like AD GPOs, or some other solution.
Distinguished Expert 2018

Commented:
PowerBroker Identity Services is one of many third party applications you could use.
Last Knight
Distinguished Expert 2018
Commented:
Hi wannabecraig,

Provided you are in a Microsoft environment and are supporting Macs and if you are using or want to use SCCM (System Center Configuration Manager) there is a slick way to deploy Certificates to Macs just as you would normally once configured to do so.

Basically, you install SCCM client agents on the Macs and manage them in SCCM, which requires PKI (Public Key Infrastructure) certificates. Once you have the PKI in place, then SCCM can request & install a user client certificate via Microsoft Certificate Services with an enterprise CA (Certification Authority), the SCCM enrollment point & enrollment proxy point site system roles. If you don’t have PKI in place, you can request and install a computer certificate independently from SCCM if the certificate meets the requirements for SCCM. The whole idea of deploying PKI certificates is to secure the communication between the Macs & the SCCM.

Here's a really good step-by-step guide on how to do this: https://prajwaldesai.com/deploy-pki-certificates-for-sccm-2012-r2/

Let me know if you have any other questions!

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial