User`s guide

AT&T Global Network Client for Windows Administrator’s Guide
© 2015 AT&T Intellectual Property. All rights reserved. AT&T, the AT&T logo and all other AT&T marks contained herein are trademarks of AT&T Intellectual Property and/or
AT&T affiliated companies. All other marks contained herein are the property of their respective owners. Images are shown for illustrative purposes only; individual
experience may vary. This document is not an offer, commitment, representation or warranty by AT&T and is subject to change.
Windows is a registered trademark of Microsoft Corporation in the United States and other countries.
-101-
Frequently Asked Administration Topics
Using Digital Certificates for Authentication
AT&T offers the use of x.509v3 Entrust and Microsoft digital certificates to authenticate users for Internet
and Managed VPN services.
AT&T does not create, distribute or maintain user digital certificates. You must support your own digital
certificate infrastructure. AT&T uses the common name as the user ID / unique identifier; therefore you
must enforce uniqueness on this attribute. The AT&T Custom Development Team can work with you to
use a limited list of other attributes as well. Contact your AT&T account team for further assistance with
Digital Certificate Authentication.
When using Digital Certificates for authentication you must use Public Properties to set them correctly for
use. See the Customizations Chapter on page 48 of this guide for additional information about Public
Properties.
Additionally, the use of Digital Certificates must be configured centrally in the AT&T administration
server.
If your company is using more than one certificate, the user will be prompted to select which signature
certificate to use for their connection (encrypted certificates are not displayed).
Using Mobile Monitoring Programs
When connecting with the AT&T Global Network Client using a Mobile service, the AT&T Global Network
Client may interfere with third party programs that monitor your mobile connectivity (usually supplied by
your Mobile Provider). Click Login Properties, Preferences tab, check the box next to Permanently
disable cellular device support to disable the AT&T Global Network Client monitoring of your mobile
activity and allow the third party program access to the mobile data. To enable monitoring, uncheck the
box next to Permanently disable cellular device support. You must restart the AT&T Global Network
Client for monitoring to resume.
Connecting Directly to a Mobile or Wi-Fi Network
Installation Option for Mobile Internet Connections
Some networks do not require AT&T Global Network authentication to obtain network access. There are
two options that will allow users to connect directly to mobile or Wi-Fi networks without entering AT&T
Global Network credentials. During install a user can select the Custom Installation and check the
“Default to “Internet” for network connections that do not require RAS credentials” checkbox under
Network Access Options. This checkbox is tied to the INTERNET_ONLY Windows Installer public property
and will not require RAS credentials for mobile or Wi-Fi use. Alternately, an administrator can set this
checkbox to default to being selected for all users at install time by referring to the INTERNET_ONLY
public property in the Customizations section of this document.