Index | Prev | Next

Setting up a display user

This system user represents the Niagara Touch display, which is authorized to connect to the station and should be configured with the most restrictive role and permissions possible. This procedure creates this user and assigns the authentication certificate you created to this user. You will need a separate user for each display.
Prerequisites: You are working in Workbench connected to the station that manages the intrusion zones.
  1. Expand Config > Services and double-click the UserService.
    The User Manager opens.
  2. To create the user for the client certificate you created, click New, select the number of users to create and click OK.
    The New view opens.
    Image
  3. Enter values for at least these properties:
    • Name can be the Common Name you used for the certificate.
    • Roles, for now assign the admin role. You will change this later to the most restrictive role.
    • Under Auto Logoff Settings, remove the check mark to select false for Auto Logoff Enabled.
    • Authentication Scheme, set to ClientCertAuthScheme.
  4. To accept the changes and save the user, click OK.
    The software alerts you that the credentials for the user need to be updated.
    Image
  5. To assign the certificate to this user, open the user again by double-clicking UserService, select the user you just created and click Edit.
    The Edit window opens.
  6. Scroll down to Authenticator and under Certificate, click Choose File.
    A File Chooser window opens.
    Image
  7. Navigate to the client certificate you created and, to assign the certificate to this user, select the certificate and click Open.
    If you used the default location, double-click User HomeCertManagement.
    The system advises you that the FoxService and WebService need to restart.
  8. To save the change you just made, click OK.
Next, for Niagara 4.9 and earlier, you export the same certificate, but this time with its private key. Then, for all versions you add the certificate to the server socket’s TrustAnchor list. You will return to this user to configure more properties later.

Related Links

  • Security (Parent Topic)

    • Index | Prev | Next