help • 11 User Configuration • User configuration • The "Administrator properties for UserDialog • The "RemoteConnector" Tab
11.2.1.3 The "RemoteConnector" Tab
This tab is used to generate the digital SwyxRemoteConnector client certificate for the user, or to assign an existing one. Via SwyxRemoteConnector, a user outside the local (LAN) or virtual private network (VPN) can log in to SwyxServer.
* 
During a new installation or update to SwyxWare V. 13.20 you can have client certificates created automatically for all users, see 6 Swyx Connectivity Setup Tool
 
* 
The "Use manually generated certificate" mode is supported only for compatibility with the older SwyxWare installations and is no longer recommended.
 
Only one of the two tab areas is active, depending on the mode selected for certificate management.
Select the desired mode via Swyx Connectivity Setup Tool.
*Generation and management of server certificates is performed automatically by SwyxWare. ("Use automatically generated certificate")
* 
If a "404" error occurs during the connection between client and server, although all required services are running, the valid client certificate may be missing on the user's terminal device. Re-assign the client certificate to the user or generate a new one.
 
"Use automatically generated certificate"
In automatic mode, the master and server certificates are generated by SwyxWare and stored in the SwyxWare database.
On the current tab, you can also have SwyxWare generate the client certificate and assign it to the user.
The certificate is automatically transferred to the user's computer on the company network after assignment.
* 
For the generation of the client certificate, if necessary, have the password ready with which you protected the root certificate during the SwyxWareconfiguration.
 
* 
In SwyxON, the password for the generation of the Client certificate is not required.
 
How to assign an automatically generated certificate to a user
1 Click on the "New" button.
A dialog window will appear with the entry field: "Root certificate password".
2 Enter the password and confirm with"OK."
The "RemoteConnector" tab will appear in foreground.
3 Click on the "OK" button on the bottom of the tab.
The dialog window "Administrator properties for users..." is closed.
The certificate is generated.
4 Open the administrator properties and select the "RemoteConnector" tab.
The certificate's digital thumbprint is entered in the "thumbprint" field.
As soon as the user SwyxWarelogs on, or when the certificate is generated, the certificate is already logged on via RemoteConnector using an older, existing client certificate, the certificate is transferred to his computer and stored in the Windows certificate store under "Certificates - Current User | My Certificates | Certificates".
* 
The client certificate stored only applies for the computer and the Windows user account under which is it stored in the Windows certificate storage.
 
In order to replace the certificate for the user, repeat steps (1) to (4).
"Use manually generated certificate"
In manual mode, the root certificate, server certificate(s) and client certificates have to be generated by you and stored in the Windows certificate storage on the corresponding computers.
In the "RemoteConnector" tab, you have to enter the thumbprint of the client certificate that you generated for the user and imported to the Windows certificate storage on the user's computer.
To enter the fingerprint of the client certificate
1 In SwyxWare-Administration, open "Administration Properties for Users..." and select the "RemoteConnector" tab.
2 In the area "Use manually generated certificate", enter the client certificate's thumbprint in the "thumbprint" field.
3 Confirm your entry with "OK".
The dialog window "Administrator properties for users..." is closed. The client certificate is assigned to the user.