主页
产品
Red Hat Enterprise Linux
10
Managing certificates in IdM
16.4. Configuring a browser to enable certificate authentication

16.4. Configuring a browser to enable certificate authentication

To be able to authenticate with a certificate when using the WebUI to log into Identity Management (IdM), you need to import the user and the relevant certificate authority (CA) certificates into the Mozilla Firefox or Google Chrome browser. The host itself on which the browser is running does not have to be part of the IdM domain.

IdM supports the following browsers for connecting to the WebUI:

Mozilla Firefox 38 and later
Google Chrome 46 and later

The following procedure shows how to configure the Mozilla Firefox 57.0.1 browser.

Prerequisites

You have the user certificate that you want to import to the browser at your disposal in the PKCS#12 format.

Procedure

Open Firefox, then navigate to Preferences Privacy & Security.
Privacy and Security section in Preferences
Click View Certificates.
View Certificates in Privacy and Security
In the Your Certificates tab, click Import. Locate and open the certificate of the user in the PKCS12 format, then click OK and OK.
Make sure that the Identity Management Certificate Authority is recognized by Firefox as a trusted authority:
1. Save the IdM CA certificate locally:
  - Navigate to the IdM web UI by writing the name of your IdM server in the Firefox address bar. Click Advanced on the Insecure Connection warning page.
    Insecure Connection
  - Add Exception. Click View.
    View the Details of a Certificate
  - In the Details tab, highlight the Certificate Authority fields.
    Exporting the CA Certificate
  - Click Export. Save the CA certificate, for example as the CertificateAuthority.crt file, then click Close, and Cancel.
2. Import the IdM CA certificate to Firefox as a trusted certificate authority certificate:
  - Open Firefox, navigate to Preferences and click Privacy & Security.
    Privacy and Security section in Preferences
  - Click View Certificates.
    View Certificates in Privacy and Security
  - In the Authorities tab, click Import. Locate and open the CA certificate that you saved in the previous step in the CertificateAuthority.crt file. Trust the certificate to identify websites, then click OK and OK.
Continue to Authenticating to the Identity Management Web UI with a Certificate as an Identity Management User.