Check GmsDefaultUser Permission on the Host Certificate Private Key

The GmsDefaultUser Windows user must have read access to the private key of the host certificate created for the closed-mode client station.

  • You set up a Secured communication between the Desigo CC server and client stations.
    NOTE: If the communication is set to Unsecured, you can skip this procedure.
  • You imported the client host certificate into the client station that you want to set to closed mode.
  1. On the closed-mode client station, click the Windows Start button, launch MMC, and set it to view and manage the Local Computer certificates (Certificates > Computer account).
    For instructions on how to do this, see: https://msdn.microsoft.com/en-us/library/ms788967(v=vs.110).aspx.
  1. In the Console Root pane, select Certificates (Local Computer) > Personal folder.
  • The list of certificates displays. One of them is the client host certificate that takes the computer name.
    NOTE: If the client host certificate is not present, it may mean that it was not yet imported or was imported for an individual user only.
    In this case, stop this procedure and verify the SMC configuration for communication security.
  1. Right-click the imported client host certificate and select All Tasks > Manage Private Keys.
  • The Permission for <certificate> private keys dialog box displays.
  1. Make sure that the GmsDefaultUser has the read permission (Allow/Read check box selected).
  • If the GmsDefaultUser is not present, click Add, select it, and click OK.
  • If the GmsDefaultUser has no read access, select the Allow/Read check box.
  • Click OK.

Related Topics

In SMC, see: