NAC Cisco Clean Access Agent - launch self signed application, remediation

[igor.florek]

Hi,

we are trying to run custom executable in remediation process with non-admin rights. As I understand it there are following requirements in order to be able to do that:

1) CAA Stub have to be installed

2) Application have to be signed with trusted certificate

3) Certificate and Application details have to be written in registry structure to be trusted by agent stub.

We've followed every step in documentation but still receiving the same error in event log:

"jada_jada.exe" is not a qualified file to be executed.

Can't figure out why is it refusing to execute it, we tried every combination.

Any idea what may be preventing it?

Thanks

[shaun.white]

Do your client machines have the root cert in their root store??

[igor.florek]

Hi,

thank you for reply ... yes I have root cert installed on client machine, when I look at file properties, it says certificate is OK. One thing that comes to my mind though is that I am member of domain, so maybe certificate have to be installed as root at domain controller?

When I have the opportunity I will try it.