Sophos Client Authentication Agent issue with MSI package and the certificate

Hi Nick KEY ,

Thank you for reaching out to the community, you can navigate to Authentication > Client Downloads > Authentication clients: 
REF - Authentication clients and server CAs for computers

Hi,

dont understand what you mean. What should I download exactly for Agent with certificate? As wrote, the EXE file does work fine, only the MSI does not work and it will have the certificate file too

You can use the GPO method to deploy this to many clients. You'll be able to download the following:

CAASetup.msi - Download and share the MSI authentication client (client authentication agent) with users.
ClientAuthentication_CA.pem - Download the CA certificate and share it with users.

Either I cannot explain my issue or you understand my question wrong.. I dont use GPO for deploying, I am using SCCM from Microsoft to deploy. So I can deploy the the CAASetup.msi and it works, but how can I add the CA in that MSI file to deploy?

You can refer - Creating an MSI Package OR Create the Windows Installer File (*.msi)

Why should I create a MSI package? CAAsetup.msi is a MSI Package? You mean for CA? IS there any way to deploy CAAsetup.msi with CA together? I dont want to experiment and create any MSI Package.

You asked how can I add the CA in that MSI file to deploy, hence I suggested so that instead of deploying it separately you can deploy it in one go...

No, I asked I wan tot deploy the CAAsetup.msi file with SCCM, If I deploy the CAAsetup.msi with SCCM, it works, but it missing the CA File. So again my question, is there any way to deploy CAAsetup.msi and CA,File. Do you any solution?

CA file will be separate and no way to deploy together...

Ok, I understand. I can deploy CA file with my SCCM, but where should be located the CA file? Why if I install the CAAsetup.exe the CA is installed?

You can add the CA via MMC.

I have to do that manually, I dont thing I can deploy CA with MMC  using  SCCM

I have to do that manually, I dont thing I can deploy CA with MMC  using  SCCM