IGEL OS firmware comes with a number of trusted root certificates from certain Certificate Authorities (CA) pre-installed. Lists of these root certificates can be found on the download server, in the
IGEL_UNIVERSAL_DESKTOP_FIRMWARE/LX/ directory. They are named
[version]_CA-certificates.txt - for example, the list for IGEL OS version 10.03.100.
Certificates signed with these root certificates can be used for server authentication and encryption in ICA, RDP, Horizon and browser sessions. You can also verify the origin of Java applications.
Nevertheless, the root certificate you need might be missing. This document explains how to load and distribute it.
The certificates must be available in the Base64 file format encoded with the file extension
To check the file format, open the certificate with a text editor. It should look like this:
We advise you to use the following file transfer types for distributing the certificates via the UMS; see also Registering a File on the UMS Server:
To be used for
All-purpose class, you need to set the owner and access permissions manually.
Web Browser Certificate
Server authentication/encryption of HTTPS websites in browsers
Server authentication/encryption in ICA, RDP or Horizon sessions
Authentication via Active Directory (AD)
Authentication/encryption for Java applications
IBM iAccess Certificate
Server authentication/encryption for IBM iAccess sessions
Common Certificate (all-purpose)
Multiple applications needing a certificate, e.g. if you want to launch an ICA session in a browser, or if you want to secure a Java session on a secure website.
With these file transfer types, you will not need to reboot after installing.