Certificate authentication

Certificate authentication is designed primarily for running task sequences in an existing OS. This enables authentication using an available certificate, typically issued by an internal PKI. In order for this to work, it is necessary to configure the DeployR server to tell it what certificate issuer should be accepted. This can be configured using the "Configure Deploy" configuration editor:

The DeployR client also needs to know which certificate(s) to present to the server. To configure this, add an entry to the bootstrap.json file that specifies a value for the "DeployRAuthCertIssuer" that matches what has been configured on the DeployR server.

If no certificates are available, or if the DeployR server rejects the certificates that were presented, the authentication process will continue, considering Entra ID authentication and then passcode authentication.