importing new certificates into an existing 802.1x System Profile

[xian]

Is it possible with Casper to import a new certificate into an existing 802.1x ethernet System Profile in OS 10.6 ? I've been trying to do this using the networksetup command but haven't had any success. I need to do this while keeping the existing certs in that System Profile intact.

[Cem]

I was using the following command for importing the computer certs:

security import /$computername.company.com.pfx -k /Library/Keychains/System.keychain -f pkcs12 -P mypassword
/bin/sleep 3 #allow some time

Have a look at the whole script (its under Add Scripts to the policy)
https://jamfnation.jamfsoftware.com/discussion.html?id=43

I hope this helps!

[nkalister]

hey cem, when I tried that I found that the updated cert lost the connection to the system-level 802.1x profile, and my machines were no longer keeping their IP's active when no one was logged in. Did you verify that the system-level profile was still automatically using the new cert?