Barracuda SSL VPN V Series, Руководство пользователя, Страница: 29 / 96

1.
2.
3.
4.
5.
1.
2.
3.
4.
1.
2.
3.
4.
5.
browser or operating system. After the initial setup is complete, the authentication process requires minimal user interaction. Users must only
select the installed certificate when prompted, and the rest of the setup is completed automatically by the browser and the Barracuda SSL VPN.
The Barracuda SSL VPN validates the offered client certificate according to parameters that are defined by you. If you do not check for certificate
attributes that are unique to each user, any user can log in with a browser that has a valid SSL client certificate. To prevent this, you must always
combine SSL client certificate authentication with another authentication method like a password prompt.
In this article:
Before You Begin
Step 1. Upload the Root Certificate
Step 2. Configure Client Certificate Authentication Settings
Step 3. Add the Client Certificate Authentication Module to an Authentication Scheme
Before You Begin
Create the following:
A root certificate.
Client certificates.
An authentication scheme using client certificates as a primary or secondary authentication method.
For more information on creating your own self-signed root certificates, see . How to Create Certificates with XCA
Step 1. Upload the Root Certificate
For every user database, you can create or upload a unique root certificate.
Open the page. Manage System > ADVANCED > SSL Certificates
In the section, select from the Import Key Type A root Certificate Authority certificate you trust for client certificate authentication
list Certificate Type
In the section, select the user database that you want to upload the root certificate to. Import Details
Click , and select the root certificate file. The certificate file must have a cer or crt extension. Browse
Click . Save
The certificate then appears in the section on the page. SSL Certificates Manage System > ADVANCED > SSL Certificates
Step 2. Configure Client Certificate Authentication Settings
Configure the settings for the client certificates.
Log into the . SSL VPN web interface
Go to the page. Manage System > ACCESS CONTROL > Security Settings
In the section, configure the client certificates settings. Client Certificates
Click . Save Changes
Step 3. Add the Client Certificate Authentication Module to an Authentication Scheme
Log into the . SSL VPN web interface
Go to the page. Manage System > ACCESS CONTROL > Authentication Schemes
Edit an authentication scheme.
Double-click to add the authentication module. Client Certificate
Click . Save
Example - How to Install and Configure YubiRADIUS
This article provides step-by-step instructions on how to deploy the YubiRADIUS virtual appliance in context with Barracuda SSL
VPN. Once YubiRADIUS is installed, Barracuda SSL VPN can be configured to act as a RADIUS client.