Using certificate-based authentication

The

CylanceON-PREM

console supports certificate-based authentication when an administrator logs in. You can create other administrators that must use certificate-based authentication and add or remove certificates from the

CylanceON-PREM

server. The CA certificates uploaded to the

CylanceON-PREM

server specify which client certificates are trusted for access to the console. If the client certificate is trusted by the Certificate Authority, then the user is authenticated and can access the console. During authentication, the server checks for revoked certificates to ensure the certificate has not been revoked. If the certificate has been revoked, the administrator will not be allowed to log in to the console. As a failsafe, the console will not allow you to delete or deactivate all of the local administrator accounts.