Centrify

Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-19147: Cannot use Group Policy to install IWA root certificate in CoreOS

Authentication Service ,  

14 April,20 at 01:00 PM

Problem: A group policy has been implemented that should be installing the IWA root certificates (or any other CA certificate) but the certificate does not get installed on CoreOS machines. MFA will not work unless this certificate is installed. Why does this happen?


Causes:

1. Prior to the Centrify DirectControl 5.6.0 release, our certgp.pl script was not supported by CoreOS

2. Group Policy is disabled by default on CoreOS




Resolution:

1. The issue with the certgp.pl script has been fixed in our Centrify DirectControl agent version 5.6.0 (Centrify Infrastructure Services suite 19.6). Please make sure this version or higher is installed.

2. Ensure that the following value in /etc/centrifydc/centrifydc.conf is set to 'False'

          gp.disable.all



 

Related Articles

 articleKB-20210: Common Questions Regarding Centrify DirectControl and CoreOS articleKB-12215: How to silently install the Centrify Agent for Windows™ using Group Policies for MFA and Enrollment articleKB-9620: How to deploy the IWA Root CA to workstations using Group Policy article[Labs] Using Centrify MFA to secure AWS WorkSpaces with Simple AD articleKB-7934: How to import IWA root certificate manually to enable Windows MFA articleCentrify 21.2 Release Notes articleCentrify 18.7 Release Notes article[Howto] Spotting and Remediating issues with PKI Trust on MFA (UNIX/Linux/Windows) or Enrollment articleCentrify Agent for Windows™ Deployment Options - Introduction