Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Configuring TRITON Settings > Configuring two-factor authentication > How does certificate authentication work?
How does certificate authentication work?
TRITON Console Help | Web, Data, and Email Security Solutions | v7.8.x
When you enable certificate authentication on the Two-Factor Authentication page, the logon process for an administrator accessing the TRITON console URL is as follows:
*
The TRITON console detects whether a client certificate is installed. If more than one certificate is available, the administrator is asked to select the certificate that allows access to the console.
*
The administrator provides their two-factor authentication credentials as defined by your organization. For example, this could be through the use of the Common Access Card (CAC) and a card reader.
*
After successful authentication, the TRITON console receives the client certificate and checks that it matches the signature in the uploaded root CA certificates. If the signature matches, the TRITON console checks for a full match with the certificates that you have either uploaded to the TRITON console, or imported from your user directory. If a match is found, the administrator associated with the two-factor authentication credentials is logged on to the console.
*
If no certificate match is found and you have set up attribute matching as a fallback option, a check is performed to see if the client certificate contains a property matching a specific LDAP attribute in your user directory. If a match is found, the administrator associated with the two-factor authentication credentials is logged on to the console.
If all configured certificate and attribute matching fails, or if the administrator does not have a client certificate, you can allow password authentication as a fallback option. If password authentication is disabled, administrators without matching certificates cannot log on.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Configuring TRITON Settings > Configuring two-factor authentication > How does certificate authentication work?
Copyright 2016 Forcepoint LLC. All rights reserved.