Skip to content

Configuring the Agent Certificate Mode

The Anyware Agent chooses a certificate based on the parameters set in the Configure PCoIP Security Certificate Settings GPO variable.

Since Anyware agents automatically generate and use self-signed certificates by default, you only need to configure the Configure PCoIP Security Certificate Settings GPO variable if you are deploying your own custom certificates.

You can configure Anyware Agents to handle certificates in the following ways:

  • Always use self-signed certificates (default)
  • Always use local custom certificates
  • Attempt to use a local certificate, and revert to self-signed if not found

Note: Import the administrative template file before configuring

The Configure License Server Path GPO variable only appears in the GPO editor after you import the administrative template file.

The example in this section configures the agent to look for the certificate only in the remote workstation's Windows certificate store. The example also gives the store the friendly name of "PCoIP". These settings are mandatory when you deploy your own custom certificates.

To configure the Configure PCoIP Security Certificate Settings GPO variable with a custom certificate:

  1. Open the Local Group Policy Editor on the agent machine:

    1. Press + r to open the run dialog
    2. type gpedit.msc and press Enter.

  2. Navigate to Local Computer Policy > Computer Configuration > Administrative Templates > PCoIP Session Variables > Not Overridable Administrator Defaults

  3. Double-click Configure PCoIP Security Certificate Settings to open the variable's dialog.

  4. Select Enabled to enable the setting.

  5. In the How the Anyware agent chooses the certificate... drop-down list, select From the Certificate Store. A search field will appear next, labelled Name of the Certificate Store to search for CA-signed certificates.

  6. In the search field, enter the name for the certificate in the Windows Cert store. This should be the friendly name of the CA signed cert which appears in the store.

  7. In The minimum key length... drop-down list, select the desired minimum key length (in bits). If you're unsure, specify the actual length of the cert you're using.

  8. Click OK.

  9. Close the Local Group Policy Editor and reboot the desktop to apply your settings.

  10. After the Anyware agent restarts, you can verify that it is using your custom certificate by checking the agent's level 2 log files.