Administrator Guide

updated to the latest version. For information about the latest package version, see the latest Dell Wyse ThinOS
release notes .
5. Click the Global INI tab to view the wnos.ini information.
6. Click the User INI tab to view wnos.ini information.
7. Click OK to save the settings.
Simplified Certificate Enrollment Protocol
Simplified Certificate Enrollment Protocol (SCEP) was used in a closed network where all end-points are trusted. The goal of SCEP is to
support the secure issuance of certificates to network devices in a scalable manner. Within an enterprise domain, it enables network
devices that do not run with domain credentials to enroll for certificates from a Certification Authority (CA).
At the end of the transactions that are defined in this protocol, the network device has a private key and associated certificate that is
issued by a CA. Applications on the device may use the key and its associated certificate to interact with other entities on the network.
The most common usage of this certificate on a network device is to authenticate the device in an IPSec session.
ThinOS is treated as a network device. The functionality of ThinOS SCEP includes manual certificate request, automatic certificate
request, and automatic renewal of certificate.
Requesting certificate manually
To request the certificate manually, do the following:
1. Go to System Tools > Certificates > Request Certificate.
The Request Certificate dialog box is displayed.
2. Enter the appropriate values in the Request Certificate dialog box, and then click the Request Certificate button.
The certificate request is sent to the server, and the client receives the response from server and installs both CA certificate and client
certificate.
3. Click Ok to save the changes.
NOTE:
• The CA Certificate Hash type currently supports MD5, SHA1, and SHA256.
• The request server URL can be an HTTP or HTTPs link. You can add the protocol prefix before the URL.
Requesting certificate automatically
Use INI parameters to automate the request, and renew the certificate process. Related INI parameters are of global scope and should be
used with INI parameter
ScepAutoEnroll.
For more information about using the INI parameters, refer to the latest Dell Wyse ThinOS INI Reference guide.
About Default Certificates
Default certificates embedded in the ThinOS are displayed in the Certificate dialog box. To view the default certificate, set ThinOS to
factory default, and on the desktop click System Settings > System Tools > Certificates. The following default certificates are
displayed in the cacerts folder, in an expandable tree structure format:
• BTCTRoot.crt
• Class3PA_G2_v2.crt
• Class4PA_G2_v2.crt
• Entrust_G2.crt
• EquafaxCA1.crt
• gd-class2–root.crt
• GTECTGlobalRoot.crt
• Pc32ss_v4.crt
• PCA-3G5.crt
To view each certificate, select the certificate you want to view, and then click View Certificate. In the Certificate dialog box, click any
of the following tabs to view the corresponding certificate attributes:
1. General—The following values are displayed:
124
Performing diagnostics