Policy Server Guides › Policy Server Configuration Guide › Authentication Schemes › X.509 Certificate or Basic Authentication Schemes › X.509 Client Certificate or Basic Scheme Prerequisites

X.509 Client Certificate or Basic Scheme Prerequisites

Ensure the following prerequisites are met before configuring a X.509 Client Certificate or Basic authentication scheme:

• An X.509 Server Certificate is installed on the SSL Web server.

  Note: If the Policy Server is operating in FIPs mode, ensure the certificate was generated using only FIPS-approved algorithms.

• The network must support an SSL connection to the client browser (HTTPS protocol).
• X.509 client certificates are installed on client browsers.
• Trust is established between client certificates and server certificates.
• Certificates are issued by a valid and trusted Certification Authority (CA).
• The issuing CA's public key validates the issuer's digital signature.
• Client and server certificates have not expired.
• The user's public key validates the user's digital signature.
• Client user name and password information exists in a user directory.
• A directory connection exists between the Policy Server and the user directory.

Note: For Apache Web servers where Certificates are required or optional, the SSL Verify Depth 10 line in the httpd.conf file must be uncommented.