This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

New SafeGuard users and certificate creation

Hello all,

Since upgrading from 6.00.1 to 6.10 on the backend, we're seeing some behavior that we believe is not normal.  We've only really started rolling out SafeGuard heavily since upgrading to 6.10 but I believed the way it worked in 6.00.1 is that once a user is made owner of a machine their user certificate is created.  If any user aside from the owner logged into an already owned computer, if the new user did not already have a cert one was created for them automatically.  This no longer seems to be the case, at least not all the time.  For example, we have one machine where 6 people will be sharing it, all of which are currently new to SafeGuard and do not have certs.  User1, the owner, successfully took ownership and their cert was automatically created.  User2, however, was able to log into Windows but no cert was automatically created.  User3 logged in and their cert was auto created.  User4 and 5 had no such luck and no user cert was auto created for them.  The computer is running SafeGuard 6.00.1.  Are we simply doing something wrong or does it seem there's something else going on here?

:49078


This thread was automatically locked due to age.
Parents
  • Hi timmmmmy,

    sorry I missed your last response…

    If you compare 6.00.1 to 6.10.0.374, there was no change in the way how certificates are created for (new) SafeGuard Users.

    Once a User logs on to a SafeGuard Client for the first time and the machine contacts the SafeGuard Enterprise Server, the so called User Machine Assignment  process will be performed (the User becomes "Owner" of the machine and activates the Power-On Authentication). In the same time, the SafeGuard Server generates a certificate for this User (if the user currently has no certificate).

    Further users can then be added to the machine / Power-On Authentication with the steps described in the SafeGuard User help chapter "4.3 Registering further SafeGuard Enterprise users".  
    When following this process, a certificate will be created for the new User (if the user currently has no certificate).

    Based on the example you've given with User2, it looks like it works in general. I'd suggest to make sure that the process of adding new users was followed accoring to the steps above and if not retry the steps.

    Hint: As per default only the "Owner" of the machine (in this case User1) is able to add new users to the machine. This can be changed (to "Everyone" or "Nobody")  via the  "Specific Machine Settings | User Machine Assignment | Allow registration of new SGN Users for ..." policy setting.

    Cheers,

    ChrisD

    :49270
Reply
  • Hi timmmmmy,

    sorry I missed your last response…

    If you compare 6.00.1 to 6.10.0.374, there was no change in the way how certificates are created for (new) SafeGuard Users.

    Once a User logs on to a SafeGuard Client for the first time and the machine contacts the SafeGuard Enterprise Server, the so called User Machine Assignment  process will be performed (the User becomes "Owner" of the machine and activates the Power-On Authentication). In the same time, the SafeGuard Server generates a certificate for this User (if the user currently has no certificate).

    Further users can then be added to the machine / Power-On Authentication with the steps described in the SafeGuard User help chapter "4.3 Registering further SafeGuard Enterprise users".  
    When following this process, a certificate will be created for the new User (if the user currently has no certificate).

    Based on the example you've given with User2, it looks like it works in general. I'd suggest to make sure that the process of adding new users was followed accoring to the steps above and if not retry the steps.

    Hint: As per default only the "Owner" of the machine (in this case User1) is able to add new users to the machine. This can be changed (to "Everyone" or "Nobody")  via the  "Specific Machine Settings | User Machine Assignment | Allow registration of new SGN Users for ..." policy setting.

    Cheers,

    ChrisD

    :49270
Children
No Data