Differences

This shows you the differences between two versions of the page.

--- userspace:zertifikats_import [2012/10/26 13:47] – tobias
+++ userspace:zertifikats_import [2021/08/23 10:37] (current) – external edit 127.0.0.1
@@ Line 1: / Line 1: @@
+====== +++ Since new OPSI KIOSK application, this is not necessary anymore +++ ======
 ======ImportCert======
 Script by tobias \\
 Comments and improvements welcome \\
+This script comes with ABSOLUTELY NO WARRANTY \\
 Tested with opsi 4.0.2 \\
@@ Line 7: / Line 11: @@
 Tested with Windows 7 Enterprise x86 \\
-If you want to use the OPSI Software Kiosk you have one Problem: The certificate errors.<br>
+If you want to use the OPSI Software Kiosk you have one Problem: The certificate errors.\\
-This OPSI-Package generates a new OPSI Client certificate with 2 domains in it.
+This OPSI-Package generates a new OPSI Client certificate with 2 domains in it.\\
-The hostname and localhost.<br>
+The hostname and localhost.\\
-After that the script imports the new certificate into the local certificate storage on the Client.
+After that the script imports the new certificate into the local certificate storage on the Client.\\
-Attention: Firefox has it's one Certificate Storage !<br>
+Attention: Firefox has it's own Certificate Storage !\\
-Achtung: Firefox verwendet nicht den Windows Zertifikatsspeicher ! <br>
+Achtung: Firefox verwendet nicht den Windows Zertifikatsspeicher !\\
-You need the CertMgr.Exe
+( comment from wolfbardo : you can use the mozilla-nss utils to import in mozilla certifikate storage \\
+see https://forum.opsi.org/wiki/userspace:mozilla_nss ) \\
+You need the CertMgr.Exe. \\
+Copy this tool into your package folder (%SCRIPTPATH%)\\
+CertMgr is available as part of the Windows SDK.      [[http://go.microsoft.com/fwlink/p/?linkid=84091]]
+Every time you reinstall or update the Opsi-Client-Agent you must set this package to setup again. The Opsi-Client-Agent installer will override your own certificate...
+After using this script, restart your client!
 ==== import.ins ====
@@ Line 59: / Line 73: @@
 "%ProgramFiles32Dir%\openssl\bin\openssl" req -new -x509 -days 1000 -nodes -config %Systemdrive%\TEMP\opsiclientd.cnf -out "%ProgramFiles32Dir%\opsi.org\opsi-client-agent\opsiclientd\opsiclientd.pem" -keyout "%ProgramFiles32Dir%\opsi.org\opsi-client-agent\opsiclientd\opsiclientd.pem"
-net stop opsiclientd
-net start opsiclientd
 [DosInAnIcon_Import]