Device posture to check if specific certificate is installed on AppGate user machine

This is an example of multiple ways to do device posture

The method uses device claim script where AppGate client download a script in the background and execute and the send the result back to either AppGate controller or AppGate GW.

This example is using Windows and PowerShell to illustrate

1. Download Check_Cert.ps1 file and open it with any editor

2. Change the value “BD9D0D1C70165449E36910F0F1316FB687990EAF” to reflect the certificate you want to check on the users’ machines

3. On AppGate admin UI, navigate to Identity --Device Claim Scripts--Add New

4. Upload the aforementioned script by press Choose a file and fill the other information as you want.

5. Device Claim Script is linked to the IdP, so when a user authenticates to that IdP the client will download the script and execute it, so Navigate to Identity -- and pick your IdP-- Configure On-demand Device Claims -- Add New

   1. Command --Run Device Claim Script

   2. Device Claim Script -- Choose the script you named it in step 4

   3. Argument --True

   4. Claim Name -- Check_Cert

   5. Platform -- All Windows devices

   Your configuration should be looks like below  

Now if you go to Assignment Criteria in Policy you should see a claim called Check_Cert

Same For Access Criteria in Condition

All you need is to use it either with Policy or Condition