User's Manual

122 | Onboard Dell Networking W-ClearPass Guest 6.4 | User Guide
Importing a Code-Signing Certificate
W-ClearPass Onboard supports importing a code-signing certificate chain and private key for signing the
Windows provisioning application. Certificates can be uploaded as PFX, PKCS-12, SPC, or PKCS-7, and can
include a chain of certificates. An operator’s profile must include the Import Code-Signing Certificate privilege in
order to access this feature.
The procedure for importing a profile-signing certificate is the same as that for importing a code-signing
certificate. To import a trusted certificate, see "Importing a Trusted Certificate " on page 123.
To import a code-signing certificate:
1. Do one of the following:
l Go to Onboard > Management and Control >View by Certificate and click the Upload a code-
signing certificate link in the upper-right corner of the page.
l Go to Onboard > Deployment and Provisioning >Provisioning Settings. You can either click the
Create new provisioning settings link at the top of the page, or click the Edit link for a configuration
set in the list. In the page that opens, click the Upload a code-signing certificate link in the upper-
right corner.
The Code-Signing Certificate Import form opens.
2. In the Certificate field, navigate to the code-signing certificate file to upload.
3. If the private key for the code-signing certificate was issued as a separate file, use the Private Key field to
navigate to the private key file.
4. Click Upload Certificate. The certificate chain is displayed.
To use the certificate for code-signing:
1. Go to Onboard > Deployment and Provisioning >Provisioning Settings >Windows tab.
2. In the Windows Provisioning section, use the Code-Signing Certificate drop-down list to select the
uploaded certificate.
To create a test certificate:
1. Go to Onboard > Management and Control > View by Certificate and click the Generate a new
certificate signing request link. The Certificate Request Settings form opens.
2. In the Certificate Type drop-down list, choose Code-Signing.
3. Complete the rest of the form with your information. Mark the Issue this certificate immediately check
box, then click Create Certificate Request.
The test certificate is displayed in the list on the Certificate Management page, and can be selected on the
Provisioning Settings form.