This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Client Authentication Agent issue with MSI package and the certificate

Hi,

I have a issue with the Sophos Client Authentication Agent the "MSI" File. If I deploy the Agent with MSI File, it installed it and I can run it, but I am getting the error with Certificate (I think the ClientAuth_CA.scc) file cannot be find.

If I install the Agent with EXE. (client_auth_agent.exe) File, it is working without any issue.

How can I deploy or install the Client Authentication Agent using MSI File (CAASetup.msi), that installed the Certificate too? (ClientAuth_CA.scc)

Regards

This thread was automatically locked due to age.

Parents

0 Vivek Jagad 3 months ago

Hi Nick KEY ,

Thank you for reaching out to the community, you can navigate to Authentication > Client Downloads > Authentication clients:
REF - Authentication clients and server CAs for computers

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Nick KEY 3 months ago in reply to Vivek Jagad

Hi,

dont understand what you mean. What should I download exactly for Agent with certificate? As wrote, the EXE file does work fine, only the MSI does not work and it will have the certificate file too
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 3 months ago in reply to Nick KEY

You can use the GPO method to deploy this to many clients. You'll be able to download the following:

CAASetup.msi - Download and share the MSI authentication client (client authentication agent) with users.
ClientAuthentication_CA.pem - Download the CA certificate and share it with users.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Nick KEY 3 months ago in reply to Vivek Jagad

Either I cannot explain my issue or you understand my question wrong.. I dont use GPO for deploying, I am using SCCM from Microsoft to deploy. So I can deploy the the CAASetup.msi and it works, but how can I add the CA in that MSI file to deploy?
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 3 months ago in reply to Nick KEY

You can refer - Creating an MSI Package OR Create the Windows Installer File (*.msi)

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Nick KEY 3 months ago in reply to Vivek Jagad

Why should I create a MSI package? CAAsetup.msi is a MSI Package? You mean for CA? IS there any way to deploy CAAsetup.msi with CA together? I dont want to experiment and create any MSI Package.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 3 months ago in reply to Nick KEY

You asked how can I add the CA in that MSI file to deploy, hence I suggested so that instead of deploying it separately you can deploy it in one go...

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Nick KEY 3 months ago in reply to Vivek Jagad

No, I asked I wan tot deploy the CAAsetup.msi file with SCCM, If I deploy the CAAsetup.msi with SCCM, it works, but it missing the CA File. So again my question, is there any way to deploy CAAsetup.msi and CA,File. Do you any solution?
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 3 months ago in reply to Nick KEY

CA file will be separate and no way to deploy together...

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Nick KEY 3 months ago in reply to Vivek Jagad

Ok, I understand. I can deploy CA file with my SCCM, but where should be located the CA file? Why if I install the CAAsetup.exe the CA is installed?
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 3 months ago in reply to Nick KEY

You can add the CA via MMC.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Nick KEY 3 months ago in reply to Vivek Jagad

I have to do that manually, I dont thing I can deploy CA with MMC using SCCM
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Nick KEY 3 months ago in reply to Vivek Jagad

I have to do that manually, I dont thing I can deploy CA with MMC using SCCM
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data