Reset Search
 

 

Article

KB19317 - Do NCLauncher & SAMLauncher support Certificate Authentication?

« Go Back

Information

 
Last Modified Date11/21/2015 6:19 AM
Synopsis
Do Network Connect (NC) Launcher & Windows Secure Application Manager (SAM) Launcher support Certificate Authentication?
Problem or Goal
There is a certificate authentication parameter available on Windows NCLauncher and SAMLauncher. However, there is not a certificate authentication parameter available on Linux NCLauncher. Does this mean that Linux NCLauncher does not support certificate authentication?

Please take note of the following:
  • Please refer to the Administrator Guide for more information on using NCLauncher\SAMLauncher.
  • WSAM is only supported on Windows based platforms.
  • NCLauncher is not currently supported for the Mac.
NCLauncher (Windows)
nclauncher.exe [-version|-help|-stop|-signout] -u <user> -p <password> -url <url> -r <realm> -c <certificate name>
NCLauncher Param Parameter Description
-version - Displays the NC Launcher version information, then exits.
-help - Displays available arguments information.
-u <username> - Specifies the username.
-p <password> - Specifies the password for authentication.
-url <IVE URL> - Specifies the IVE URL information.
-r <realm> - Specifies the realm to which the IVE submits the user’s credentials.
-c <certificate name> - Specifies the certificate to use for user authentication instead of a user name and password.
-d - <DSID> Passes a cookie to NC Launcher from another authentication mechanism when NC Launcher starts
-signout - Terminates NC tunnel and signs out current user.
-stop - Terminates NC tunnel.
SAMLauncher (Windows)
samlauncher.exe [-version|-help|-stop|-signout] -noupgrade -reboot -u <user> -p <password> -url <url> -r <realm> -c <certificate name> -verbose

SAMLauncher Param Parameter Description
-start - Initiates the WSAM connection.
-stop - Terminates the WSAM connection.
-signout - Terminates the WSAM connection and IVE user session.
-version - Displays WSAM version information and then exits.
-help - Displays available arguments.
-noupgrade - Cancels automatic upgrade of WSAM software.
-reboot - Automatically reboots if prompted by an upgrade.
-u <username> - Specifies the user name.
-p <password> - Specifies the password for authentication.
-c <certificate name> - Specifies the certificate submitted by the user for authentication.
-u <URL> - Specifies the sign-in URL for the IVE.
-r <realm> - Specifies the realm to which the IVE submits the user’s credentials.
-verbose - Prompts users for input through dialog boxes.
Sript Options
-loginscript file - Specifies the location and name of the script file to run when WSAM launches.
-postscript file - Specifies the location and name of the script file to run when WSAM exits.
NCLauncher (Linux)
# cd ~/.juniper_networks/network_connect/
# ./ncsvc -h <host> -u <user> -p <password> -f <cert_file> -r <realm> -L <log_level> -g <zip\upload> -U <sign_in_url> -v <version> -K <kill>
Note: -f parameter is referrring to the SA (public key only) device certificate which is required to connect to the SA. This is not referring to certificate authentication.
ncsvc Parameters Parameter Description
Sign-in - Options
-h host - SA hostname or IP address
-u user - Username
-p passwd - Password
-r realm - SA sign-in realm
-P port - Service port number
-f cert_file - SA certificate
-m md5hash - SA certificate MD5 hash
-U url - IVE realm sign-in URL
Logging options
-L log-level Log message level. Options are:
0-Log - critical messages only
1-Log - critical and error message
2-Log - critical, error and warning message
3-Log - critical, error, warning and info message (default)
4-Log - verbose messages
5-Log - all messages
Miscellaneous options
-v - Print version number
-g - Zip and upload log file to host
-K - Kill all running ncsvc services
Script options
-n - start_script Network Connect start script
-t - end_script Network Connect disconnect script
Cause
Solution
Certificate authentication is only supported on Windows for both SAMLauncher and NCLauncher. The Linux version of NCLauncher does not support certificate authentication

Please Check the Related KB link for additional information on  Support of Dual Authentication using either SAM Launcher or NC Launcher.


KB19319-[SSL VPN] Does NC Launcher (Windows Version) and SAM Launcher support Secondary Authentication?

 
Related Links
Attachment 1 
Created ByData Deployment

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255