About SSL Client Certificates

Authentication

MOVEit Automation uses client certificates for FTP/S and MOVEit Transfer authentication, S/MIME signing/encryption and AS1/AS2/AS3 authentication/signing/encryption.

An X.509 digital certificate is a document that verifies the identity of the holder of the certificate. Digital certificates are often issued by and vouched for by Certification Authorities (CAs), but may also be "self-signed". Every certificate contains two keys used by public/private key cryptography.

A certificate that is used for client authentication consists of the following components:

• A public component that contains the name of the client and the public key.
• A private component that contains an encrypted version of the private key.

  Although it is possible to have a certificate without the private component, such a certificate cannot be used as a client certificate.

• A password that protects the private key.

  Certificate Stores on a Windows system

  On a Windows system, certificates are registered with the operating system, usually in one of two locations: the Local Machine store, or the Current User store. (This store is also known as the "Personal" or "My" store.) The Local Machine store contains certificates that can be accessed by anyone on the local computer. Only administrators can add or modify certificates in this store. The Current User store contains certificates that can be accessed only by the currently signed on user. The current user has full access to the store and may add or modify certificates in the store. MOVEit Automation accesses the Current User store when looking for certificates, and can install (import) a certificate into this store.

  To use a client certificate with MOVEit Automation:

1. Obtain a certificate, convert it (if necessary) to a form understood by Microsoft software, and import it into MOVEit Automation. For more information, see Obtaining and Importing SSL Client Certificates.
2. Configure a MOVEit Automation host to use the certificate when communicating with a particular FTP server, MOVEit Transfer server, AS2 partner, etc. For more information, see the field descriptions for the type of host.