no client certificate presented military cac

The Active Directory settings must be configured correctly. 1.3 Prerequisitesīefore following the steps below to configure the LoadMaster, there are some prerequisites that need to be in place: This document is intended to be read by anyone interested in finding out how to configure the LoadMaster to use DoD CAC authentication.

The purpose of this document is to provide step-by-step instructions on how to configure the LoadMaster to use DoD CAC authentication. Verifying the full chain to the Certificate Authority (CA)Īuthorization – occurs after SSL session establishment and the matching of the certificate Subject Alternative Name (SAN) against the User Principal Name (UPN) of the appropriate principal in Active Directory. Verifying revocation status using Online Certificate Status Protocol (OCSP) There are two core elements to the process of a user gaining access to an application with CAC:Īuthentication – occurs during SSL session establishment and entails: The request for and presentation of the client certificate happens during initial SSL session establishment. For more information on this, please refer to the Using CAC Authentication for LoadMaster WUI Access section. The LoadMaster acts on behalf of clients presenting X.509 certificates using CAC and becomes the authenticated Kerberos client for services.ĬAC authentication can also be used to authenticate access to the LoadMaster WUI.

The Edge Security Pack (ESP) feature of the Kemp LoadMaster supports integration with DoD environments leveraging CAC authentication and Active Directory application infrastructures. It leverages a Public Key Infrastructure (PKI) Security Certificate to verify a cardholder’s identity prior to allowing access to protected resources. In addition to providing physical access to buildings and protected areas, it also allows access to DoD computer networks and systems satisfying two-factor authentication, digital security and data encryption. Configure Delegation for the User EntryĪ Common Access Card (CAC) is a smart card used for identification of active-duty military personnel, selected reserve, US Department of Defence (DoD) civilian employees and eligible contractor personnel.Add a Certificate to the Active Directory for TLS/LDAPS.Appendix A: Configure the Active Directory Settings.Logging in to the LoadMaster WUI with CAC Authentication.Enable CAC Authentication for LoadMaster WUI Access.Upload the Certificate to be Validated to the LoadMaster.Complete the CAC Infrastructure Configuration.Using CAC Authentication for LoadMaster WUI Access.Configure the Outbound SSO Domain in the LoadMaster.Configure the Inbound SSO Domain in the LoadMaster.

Generate and Import a Client Certificate.

Install the Root Certificate on the LoadMaster.

Connect to a Network Time Protocol (NTP) Host.

No client certificate presented military cac