Installing certificate on Windows systems

On Windows systems, ensure that BCM certificate is installed and trusted for secure communication between the BCM server and the system. 

Related topics

Accessing-and-navigating-the-BMC-Client-Management-web-console

Managing-devices-remotely

To install the certificate on the system

  1. On a Windows system, click Download Certificate.
  2. Click Install Certificate.
    Windows_download_certificate.png
  3. Import the certificate to the local system.
    Windows_import_certificate.png
  4. Click Next.
  5. On the Certificate Import Wizard window, select Place all certificates in the following store to specify a location for the certificate.
  6. Click Browse to select the Trusted Root Certificate Authorities.
    Windows_trusted_certificate.png
  7. After you install the certificates to your local system, you must restart the browser to load the certificate.

To install the certificates from a browser

You can directly download the certificate from a browser.

  1. On the browser, click Settings > Manage Certificates. 
  2. On the Trusted Root Certification Authorities tab, click Import.
  3. After installation, click Close.

To install the certificates on all devices in a domain

Make sure that your Active directory has the Active Directory Certificate Services installed to distribute certificates to client computers using Group Policy On a domain controller in the forest of the account partner organization 

To make the certificate available on all the devices in a domain, proceed as follows:

  1. Click Start > Administrative Tools > Group Policy Management.
  2. Find an existing Group Policy object (GPO) or create a new GPO to contain the certificate settings. 
    Ensure that the GPO is associated with the domain, site, or organizational unit (OU) where the appropriate user and computer accounts reside.
  3. Right-click the GPO and click Edit.
  4. In the console tree, open Computer Configuration\Policies\Windows Settings\Security Settings\Public Key Policies, right-click Trusted Root Certification Authorities, and then click Import.
  5. On the Welcome to the Certificate Import Wizard page, click Next.
  6. On the File to Import page, type the path to the appropriate certificate files (for example, C:\Program Files\BMC Software\Client Management\Master\bin\certs\auth\<checksum>\BCM.crt.) 
    The correct certificate to import may vary and should be verified by reviewing the definition of CertsAuth= in the \Master\config\mtxagent.ini file.
  7. On the Certificate Store page, click Place all certificates in the following store, and then click Next.
  8. On the Completing the Certificate Import Wizard page, verify that the information you provided is accurate, and then click Finish.
  9. Now force the group policy by using gpupdate /force and restart your browser or kill all browser process then re-launch the browser.