Microsoft Windows Auto Pilot and SSL decryption

[MP18]

Hi Everyone,

Seems the Microsoft Windows Auto Pilot does not work when SSL decryption is enabled.

I tested see no drops on the global counters and nothing on PA PCaps.

When disabled SSL decryption it worked fine.

Any ideas?

Mike

[BPry]

@MP18,

You'll likely need to exclude it from decryption as it likely uses client certs in the setup process that doesn't take kindly to interception. 

[MP18]

so does it mean that any application using client cert will not show any drops?

or only way to see any error is to do flow basic for ssl and others?

[BPry · Accepted solution]

@MP18,

Depends on the application in question, but in general I've come across a lot of client cert services that don't indicate any errors that fail with decryption. 

[MP18]

Many thanks for sharing the info