User guide

Odyssey Access Client User Guide
10  Installing OAC in a UAC Network
 You can install OAC by opening a Web browser and navigating to the IP address
or URL for a particular Infranet Controller. Ask your administrator for the
correct address information needed to access the Infranet Controller.
 If you use a Web browser to access protected resources on your corporate
network and do not yet have OAC installed on your system, a captive Web
portal might redirect you automatically to an Infranet Controller so that the OAC
can be downloaded to your machine. This happens the first time only so that
the OAC can be installed. The captive portal is optional and might not be
present on your network.
During the process of downloading OAC, a dialog box might prompt you to sign
in to the Infranet Controller unless your administrator has configured the
system to use your Windows logon credentials or has configured the Infranet
Controller for single sign on. Once you have OAC installed and running and
your computer meets your network’s security requirements, a dialog box
prompts you to sign on to the Infranet Controller.
Using the Web Portal for Installing and Configuring OAC
If you attempt to access the Web or protected network resources on your corporate
network without having OAC installed on your system, the network firewall might
redirect you automatically to a special Web portal that installs and configures OAC
on your machine so that you can sign on to an Infranet Controller and access
protected resources. If an older version of OAC is already installed on your machine,
the latest version will be installed.
Depending on the configuration policy for your network, this installation process
might include a dialog box that prompts you to sign in to the Infranet Controller.
There might also be a prompt to trust the server certificate. See the next section,
”Loading a Certificate to the Trusted Server Database” for more information.
Loading a Certificate to the Trusted Server Database
The first time that you navigate to the Web portal, you might be prompted to add a
certificate to your trusted server database. This happens only if you do not have the
certificate on your endpoint and if the certificate is available from the local trust
server. If you choose not to accept the certificate and do not have temporary trust
enabled, authentication to that trust server will fail. Refer to the Odyssey Access
Client User Guide for more information about the temporary trust option.
Automatic Trust Configuration for Infranet Controllers
OAC is automatically configured to trust an Infranet Controller if it can verify that
the Infranet Controller is passing a valid certificate. For this verification to occur, the
trusted root CA certificate for the Infranet Controller must be installed on the
endpoint. If the CA certificate is not installed, you cannot sign into the Infranet
Controller.
During OAC installation, the Infranet Controller automatically installs the CA
certificate on your computer. If you are prompted during installation, you must
allow the installation of the CA certificate. If the trusted root CA certificate is
pre-installed on your computer, then the prompt does not appear during
installation.