Forum Discussion

David_Glasgow_1's avatar
David_Glasgow_1
Icon for Nimbostratus rankNimbostratus
Oct 23, 2013

Machine Certificate Check and UAC

Hi All

 

We are currently completing an evaluation of an F5, with APM. We are currently working with the Edge Client Software (which has been installed by right clicking, Run as Administrator), which has installed a handful of services on the client.

 

My question is, when the Machine Certificate Check is taking place, a UAC prompt is displayed - I am an administrator of my machine, and simply continue through the check. Is there anyway for the F5 client to suppress the UAC prompt, but still obtain both the public and private keys of the certificate?

 

My understanding was that this was the purpose of the F5 Networks Machine Certificate Checker service?

 

Thanks David

 

APM
deployment
design
security

3 Replies

Sort By
  • amolari's avatar
    amolari
    Icon for Cirrus rankCirrus
    Oct 23, 2013

    The purpose of that Machine Certificate Checker service (new with v11.4) is to allow verification of the private key if the user hasn't got local admin right and no extra permissions had been granted to the users to access the private key (bad idea). Have you selected that service to be deployed with the Edge Client package? And you still have this UAC prompt? Anyway, weird that you get the UAC prompt in any case (with/without the service), as you're local admin. In the documentation, there's an option regarding UAC prompt, but that's a control for non-admin users "Allow User Account Control right elevation prompts Set this option to No to suppress the UAC prompt during private key checking for non-admin users." Alexandre

     

  • David_Glasgow_1's avatar
    David_Glasgow_1
    Icon for Nimbostratus rankNimbostratus
    Oct 24, 2013

    Thanks, completed a little more testing today, and for a user without admin rights, there is no UAC prompt. However for users with admin rights, and UAC enabled; there is a prompt for UAC - which we can deal with...

     

    Thanks for you help.

     

    Cheers David

     

  • vandenhoutenp_9's avatar
    vandenhoutenp_9
    Icon for Nimbostratus rankNimbostratus
    May 08, 2014

    Hi David,

     

    Would you mind confirming how you configured this within the machine certificate check? What variables were used? I'm currently trying to get this working but not having much luck.

     

    Thanks

     

    Peter