Topics started by RomainBee

2 Topics

R
RomainBeeScout
asked in Intelligent Operations

mutual authentication webhooks

I’m trying to secure webhook communication. I’m using PRISM Element. My callback server uses https and has a web-server certificate installed issued by a local CA. First question is, which CA certificate will PRISM use to validate the callback server certificate? Is it the same CA certificate used for the PRISM web server? Second question, how does the callback server verify that the webhook effectively originated from PRISM? Is this mutual TLS or is there another method? If mutual authentication, what certificate does PRISM use for this?

1
S
1 year ago
R
RomainBeeScout
asked in Intelligent Operations

Enabling Client Authentication with Certifiate

Hi Guys,I’m trying to enable client authentication through certificate on Prism Element (CE Edition), in order to establish a 2 ways authentication (Client -> Server and Server -> Client). I followed the documentation related to this configuration. https://portal.nutanix.com/page/documents/details?targetId=Nutanix-Security-Guide-v6_0:mul-security-authentication-client-pc-t.htmlLet me sum up my current configuration:Prism element WebUI has a certificate delivered by a local CA.    Under the menu Authentication > Client , I’ve enabled “Client Chain Certificate” and “Enable Client Authentication”. The chain contains ( root CA + client certificate ). The client certificate, is a “Client Certificate” that support authentication, the common name is set and subjAltName also ( CN = UPN = client@domain.local ) When I try to query the api, I get this error message:{"message":"An Authentication object was not found in the SecurityContext"}It seems that Prism doesn’t see the client certi

0
R
2 years ago

Badges

Show all badges
Terms & Conditions