Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-19147: Cannot use Group Policy to install IWA root certificate in CoreOS

Authentication Service ,  

6 September,19 at 10:31 PM

Problem: A group policy has been implemented that should be installing the IWA root certificates (or any other CA certificate) but the certificate does not get installed on CoreOS machines. MFA will not work unless this certificate is installed. Why does this happen?


Causes:

1. Prior to the Centrify DirectControl 5.6.0 release, our certgp.pl script was not supported by CoreOS

2. Group Policy is disabled by default on CoreOS




Resolution:

1. The issue with the certgp.pl script has been fixed in our Centrify DirectControl agent version 5.6.0 (Centrify Infrastructure Services suite 19.6). Please make sure this version or higher is installed.

2. Ensure that the following value in /etc/centrifydc/centrifydc.conf is set to 'False'

          gp.disable.all



 

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.