This article describes an issue with installing certificates through group policy on CoreOS and a bug that was fixed to resolve this problem.
Problem: A group policy has been implemented that should be installing the IWA root certificates (or any other CA certificate) but the certificate does not get installed on CoreOS machines. MFA will not work unless this certificate is installed. Why does this happen?
Causes:
1. Prior to the Centrify DirectControl 5.6.0 release, our certgp.pl script was not supported by CoreOS
2. Group Policy is disabled by default on CoreOS
Resolution:
1. The issue with the certgp.pl script has been fixed in our Centrify DirectControl agent version 5.6.0 (Centrify Infrastructure Services suite 19.6). Please make sure this version or higher is installed.
2. Ensure that the following value in /etc/centrifydc/centrifydc.conf is set to 'False'