Join Brien Posey for an in-depth discussion in this video Configure Group Policy Objects for certificates, part of Windows 10: Deploy and Manage Virtual Applications.
- [Instructor] App-V can be configured for SSL encryption when streaming applications and there are two group policy settings that are related to the SSL encryption. So right now, I'm on my domain controller, and I've got the server manager open. And what I'm going to do is I'm going to open my group policy editor. So I'm going to go to Tools, and then I'm going to choose Group Policy Management from the Tools menu and this is going to open the Group Policy Management console.
And right here, you can see my default domain policy. I'm going to right click on the default domain policy and choose edit. And that's going to open up the Group Policy Management editor. So the group policy settings I'm interested in can be found under Computer Configuration, Policies, Administrative Templates, System, App-V, and then Streaming.
So we can see there are a lot of group policy settings related to application streaming. But there are two of these policies that are specifically related to SSL encryption. The first one is Certificate Filter For Client SSL. So I'm going to go ahead and open this up by double clicking on it. And you can see this isn't configured by default, if we want to enable it, we would simply choose enable. And what this does is if you look in the help section, it specifies the path to a valid certificate within the certificate store.
So we have a box over here that we can use to provide the path to the certificate within the certificate store that we want to use. So I'm going to cancel out of this, and the other setting that's of a interest to us is the Verify Certificate Revocation list. And that setting is right here. If I open this up, this is just a Boolean setting. It's either enabled or disabled, there is nothing else we have to configure. And what this does is it looks at the certificate store and it checks the certificate revocation status before it will allow streaming using https.
So another word, just make sure that the certificate hasn't been revoked before it streams an applications using SSL encryption. So those are the setting that are related to SSL encryption with application streaming.
- Installing and deploying App-V
- Sequencing an application
- Editing or upgrading an application
- Configuring applications for deployment in App-V
- Deploying apps with Intune