topic NAC Cisco Clean Access Agent - launch self signed application, remediation in Network Security

NAC Cisco Clean Access Agent - launch self signed application, remediation

igor.florek — Fri, 21 Feb 2020 10:56:17 GMT

Hi,

we are trying to run custom executable in remediation process with non-admin rights. As I understand it there are following requirements in order to be able to do that:

1) CAA Stub have to be installed

2) Application have to be signed with trusted certificate

3) Certificate and Application details have to be written in registry structure to be trusted by agent stub.

We've followed every step in documentation but still receiving the same error in event log:

"jada_jada.exe" is not a qualified file to be executed.

Can't figure out why is it refusing to execute it, we tried every combination.

Any idea what may be preventing it?

Thanks

Re: NAC Cisco Clean Access Agent - launch self signed applicatio

shaun.white — Thu, 31 Jul 2008 13:12:17 GMT

Do your client machines have the root cert in their root store??

Re: NAC Cisco Clean Access Agent - launch self signed applicatio

igor.florek — Fri, 01 Aug 2008 07:45:54 GMT

Hi,

thank you for reply ... yes I have root cert installed on client machine, when I look at file properties, it says certificate is OK. One thing that comes to my mind though is that I am member of domain, so maybe certificate have to be installed as root at domain controller?

When I have the opportunity I will try it.