After upgradeding the NAC from 4.1.3 to 4.7.2, When the NAC agent login, we are getting the warning message as below
certificate issues by www.perfigo.com is suitable for test lap but production we have to go for CA certificate. Customer not interested to go for the CA one.
How to resolve this issue?
Thx in advance
That message will show up when you administer the CAS or the CAM, and you have the perfigo cert in the Trusted Root Stores of those devices. Only way to get rid of it is to remove the perfigo cert from the root store, but if you do that, you have to move to another CA or use true self-signed certs.
To avoid the clients getting the untrusted warning messages you will have to add the root certificate (either perfigo or if self-signed, the identity cert itself) to the client machine's Trusted root stores.