> For the complete documentation index, see [llms.txt](https://docs.skyone.cloud/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.skyone.cloud/english/skyone-autosky-plugin/a1-certificate-management.md). # A1 Certificate Management Starting with version 2.0.3.8, the Autosky Plugin enables per-user management of A1 digital certificates, offering: * Secure certificate upload; * Encrypted storage; * Automatic installation in RDP sessions. The goal is to give end users full autonomy, eliminating the need for administrator intervention for each certificate. *** ### Accessing the Plugin and Certificate Manager After updating to version 2.0.3.8, the Autosky Plugin and the Certificate Manager are available in the Windows system tray. **Step-by-Step via System Tray** 1. Locate the Autosky Plugin icon in the Windows system tray. 2. Right-click the icon to open the context menu. 3. Select **Autosky Plugin**. **Access via the Plugin Interface** In addition to the system tray menu, the Certificate Manager can be accessed directly through the plugin: 1. Open the Autosky Plugin. 2. Click **General**. 3. Select **A1 Certificate Manager**. 4. Register your certificate. *** ### Registering New Certificates The local certificate is encrypted and uploaded to the Skyone environment, making it available for all user sessions. #### Step-by-Step 1. In the **General** tab, click **Manage A1 Certificates**. 2. In the dialog that opens, click **Add**. 3. **In the Add A1 Certificate window:** * Click **Browse…** and locate the `.pfx` or `.p12` file on your computer. * Enter a **Friendly Name** to identify the certificate. * Enter the certificate **Password**. * Click **Save**. {% hint style="info" %} The plugin keeps a local copy of the certificate for use in sessions, storing sensitive information in encrypted form. Even if the original certificate file is deleted, the system automatically reinstalls the certificate in new RDP sessions. {% endhint %} *** ### Monitoring and Status The plugin automatically reports the validity of registered certificates: 1. **Valid certificates:** Displayed with a green checkmark icon. 2. **Expired certificates:** Displayed with a red alert. The system will still attempt to install the certificate but notifies the user that it should be replaced. *** ### Certificate Usage During an RDP Session #### Step-by-Step 1. **Automatic Installation:** When an RDP session starts, the plugin detects registered certificates and silently installs them into the user’s certificate store. A notification indicates that the installation is in progress. 2. **Real-Time Management:** During an active session, users can add a new certificate directly through the plugin. The certificate becomes immediately available within the current session. 3. **Manual Reinstallation:** If additional certificates are added while a session is running, execute the **Reinstall Certificates** action from the application stage so that the certificate is made available on the remote machine. *** ### Plugin vs. Web Console | Feature | Web Console (Admin) | Autosky Plugin | | ----------------- | ------------------------------------------------------------------------------------------ | ---------------------------------------------------------------- | | **Configuration** | Requires access to the Autosky Console and the customer's **Digital Certificates** section | End users can upload certificates through an intuitive interface | | **Complexity** | Difficult to scale across multiple users | Scalable, as each user manages their own certificate | | **Security** | Certificates are stored in locations accessible to the server | End-to-end encryption tied to the individual user | | **Compatibility** | Works on any platform through a web browser | Windows only (macOS not supported) | *** ### Important Notes * **Scalable Environments (Scaling):** Certificates are automatically installed on all connections in environments where instances are created and destroyed after each logoff. * **Dedicated Environments (Micros):** Certificates remain installed on the machine until they expire or are manually removed. * **Certificate Removal:** The plugin manages certificate additions and updates but does not automatically remove certificates from the server. * **Operating System Limitation:** This feature is currently available only on Windows. macOS users must use the API or Web Console for certificate management. *** A1 Certificate Management through the Autosky Plugin decentralizes certificate registration, automates certificate installation in RDP sessions, and increases user autonomy. This solution simplifies workflows for both administrators and end users, ensuring that digital authentication certificates remain securely available, up to date, and ready for use whenever needed. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.skyone.cloud/english/skyone-autosky-plugin/a1-certificate-management.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.