The NBA master certificates that the NBA uses to sign server certificates must be available for the client application to use.
The client application is usually a browser running on a user's computer. You therefore need to download and distribute the master certificates to all computers in your organization for which you want the ability to decrypt SSL communications.
In most cases, the browser used is Internet Explorer. You can update the certificate store for Internet Explorer using Windows Group Policy. Other browsers and applications have their own certificate stores, so you must identify and update those stores before you enable SSL decoding.
Important: You must distribute the master certificate! If you do not, client applications may fail to make SSL connections because they will be unable to validate the certificate returned by CA DataMinder Network. Internet Explorer displays the generic message 'Internet Explorer cannot display the web page' and may not explicitly warn you about a certificate error.
Copyright © 2014 CA.
All rights reserved.
|
|