Log in to the Web Interface via SSL Client Certificate

Required User Role: Any

Before you begin:

  • Confirm your Tenable.sc administrator fully configured Tenable.sc for certificate authentication, as described in Certificate Authentication.

To perform a certificate-based Tenable.sc login:

Note: The following information is provided with the understanding that your browser is configured for SSL certificate authentication. Please refer to your browser’s help files or other documentation to configure this feature.

  1. Open a browser window and navigate to Tenable.sc.

    The browser presents a list of available certificate identities.

    For information about Tenable.sc-browser communications encryption, see Encryption Strength.

  2. Select a certificate.

  3. Click OK.

    An authentication prompt appears (if required to access your certificate).

  4. (Optional) If prompted, type a PIN or password.
  5. Click OK.

    The Tenable.sc login page appears.

  6. Log in using the username to be associated with the selected certificate.

    Caution: Only one Tenable.sc user may be associated with a single certificate. If one user holds multiple user names and roles, a unique certificate must be provided for each login name.

    The Certificate Authentication window appears.

  7. When prompted, specify whether the current certificate is to be used to authenticate the current user.

    • Click Yes to always use the certificate for authentication.
    • Click No to ignore the certificate and log in via TNS authentication.

    Tenable.sc logs you in.

Subsequent Logins

After you log out of Tenable.sc, Tenable.sc displays the login page. If you want to log in again with the same certificate, refresh your browser window. If you want to use a different certificate, you must start a new browser session.

After you perform your second certificate login, edit your account from the Profile page to view your certificate details. If your certificate changes or you need to revoke it, click the Clear Certification Details button to disassociate the certificate from your account.