Filter
Top Products
Chapter 8: Device Management
156
Enabling the AKC Download Server Certificate Validation
If you are using the AKC client, you can choose to use the Enable AKC
Download Server Certificate Validation feature or opt not to use this
feature.
Note: When operating in IPv4 and IPv6 dual stack mode with 'Enable
AKC Download Server Certificate Validation' feature, Microsoft
®
ClickOnce
®
requires that the server certificate CN should not contain a
zero compressed form of IPv6 address.
If it does you will not be able to successfully download and launch AKC.
However, this may conflict with browser preferences for the form of the
IPv6 address.
Use the server hostname in the common name (CN) or include
compressed and uncompressed forms of the IPv6 address in the
certificate's Subject Alternative Name.
Option 1: Do Not Enable AKC Download Server Certificate
Validation (default setting)
If you do not enable AKC Download Server Certificate Validation, all
Dominion device users and CC-SG Bookmark and Access Client users
must:
Ensure the cookies from the IP address of the device that is being
accessed are not currently being blocked.
Windows Vista, Windows 7 and Windows 2008 server users should
ensure that the IP address of the device being accessed is included
in their browser's Trusted Sites Zone and that Protected Mode is not
on when accessing the device.
Option 2: Enable AKC Download Server Certificate Validation
If you do enable AKC Download Server Certificate Validation:
Administrators must upload a valid certificate to the device or
generate a self-signed certificate on the device. The certificate must
have a valid host designation.
Each user must add the CA certificate (or a copy of self-signed
certificate) to the Trusted Root CA store in their browser.
When using CC-SG neighborhoods, you must enable AKC on each
neighborhood member.
To install the self-signed certificate when using Windows Vista
®
operating system and Windows 7
®
operating system:
1. Include the KX II IP address in the Trusted Site zone and ensure
'Protected Mode' is off.