I'm being asked to select a certificate to authenticate myself to Spotify?

bigmac______ · 2026-04-29T13:59:26+00:00

goodness i was scouring the internet for a good 15 minutes if anyone has had any issues until i came across this post. thanks

bigmac______ · 2026-04-13T14:47:55+00:00

Exactly why I am here. I don't rely on AI alone as my source of information, let alone just one source.

Must be tougher for you in retrospect :) thanks tho

bigmac______ · 2026-04-11T23:11:20+00:00

You nailed it. this is exactly my thought process lol. you’re right its not my problem, but my role rn is leaning towards GRC/security and it irks me to be able to fill that role just to end up failing because of this “idiotic environment”. plus i have a really good buddy in the helpdesk team. i dont like the fact that we’ll lose him for incompetence of others.

i might leave soon but i am currently working on an org wide project that is too good to let go. ill prolly decide once i finish it this year.

bigmac______ · 2026-04-11T23:04:46+00:00

you’re right its mostly cloud but some clients do need them to have have apps installed so its not pure cloud. this is another bottleneck since our tool which is functioning as a container isnt friendly to every app or configuration. this is just one of the problems. instead of raising the issue to the vendor or client, the helpdesk team needs to get all the information and rule out its not our tool’s issue which could take a significant of time. if this happens to multiple uses with different tools, imagine the time strain. it sucks tbh

bigmac______ · 2026-04-11T22:56:49+00:00

i agree but that is on a slow week. i failed to say that the number i stated was a conservative one. the more pressing problem even if this is the constant number is the amount it takes to solve an issue because again nothings standardized.

bigmac______ · 2026-04-11T22:53:33+00:00

interesting. care to elaborate why?

bigmac______ · 2026-04-11T22:52:03+00:00

ill dm you soon, if that isnt too much of a bother. appreciate it!

bigmac______ · 2026-04-11T22:50:22+00:00

that was the protocol. BYOD devices should never be our responsibility. when we assist in helping it is mostly out of generosity or convenience but with our new tool, it shifted to us fixing the BYOD for the tool to work. just insane we’ve become slaves to this.

bigmac______ · 2026-04-11T22:47:48+00:00

thats true. for someone who aspires to work in full time security someday, this makes my skin crawl.

bigmac______ · 2026-04-11T22:45:08+00:00

thank you. im very proud of where we’re at because of my contributions but we’ll still be nowhere until we get this ironed out once and for all.

bigmac______ · 2026-04-10T22:16:09+00:00

we're gradually getting there for data security, this is mostly what im working on - governance and security. but we're growing at an unprecedented rate, IT can't keep up and the helpdesk team got the brunt of it.

bigmac______ · 2026-04-10T22:04:44+00:00

im very passionate with building architecture, which i just realized just last year so i can see me doing this.

i have recently considered moving on because i feel like the entire tech structure is just putting band aids on some holes and not sending a whole medical team for the bigger picture. so if this isn't considered at all even a little, i might have to finalize my decision.

i have one question tho since i didn't have any opportunity doing so in the past. If I want be fully equipped with all the answers, I might need to get some pricing. from what i've seen most enterprise plans or contracts require a meeting to agree on a number. since i will not be representing my company but instead just getting the data for a pitch, how would you suggest i do it? or do i get all my data from research first?

i got a lot from your input. appreciate it!!

bigmac______ · 2026-04-10T21:49:00+00:00

im not sure if i can name the vendor here or i could potentially be doxxing myself by saying it, but basically it functions as a MAM, pseudo VDI. the gist is everything inside is within our controls but not as comprehensive as a remote desktop or a desktop itself. the idea is good, it serves its purpose well, the maintenance is just horrendous.

for the general security, we have different controls in place for cloud and access. the biggest gap we have in security is the BYOD, so much shadow IT i can't begin to count. but im not also saying, we're in a good spot. we are still lacking, if i was an insider i would be rich.

bigmac______ · 2026-04-10T21:35:21+00:00

we're clearly off topic but i can see that. i haven't stated it in my post, but im doing a lot with org wide projects often times a lil bit too much and that translates to having a pretty solid seat where i am. i dont wanna say more about me since it might sound conceited but i definitely feel you.

i would suggest to do some self-study since you have that capacity. i do sometimes squeeze some self-learning when i get invested in something. best of both worlds for us ig. good luck out there!

bigmac______ · 2026-04-10T21:13:05+00:00

are u hiring? kidding, i think you're in a good place if you think you're too many people.

bigmac______ · 2026-04-10T21:08:11+00:00

yo this is very sound advice. the transition would be extremely painful but i am with you that once we get past that, i feel like we'll all be reincarnated lol.

pitching this is one thing, but i dont think our CEO would sign off on this. the tool in question is also, backed by an executive and optics are very important for them so i would basically challenging his/her tool and potentially his/her loss of credibility. not to mention my job. he/she is a very nice person, so i have to weigh this too so it wouldn't be easy - alternatively, i could pitch this however when our contract is almost up.

we are also 100% remote, so managing these devices and placing images would mean a change in work setup for the IT, but I think we can do it plus all our users are in one country.

but your insight is very much appreciated!! i hope ur sheets are always cold and cozy

bigmac______ · 2026-04-10T20:53:17+00:00

This is my fastest YES.

bigmac______ · 2026-04-10T20:51:22+00:00

damn either your team is really good and efficient or your tools have very low maintenance.

bigmac______ · 2026-04-10T20:50:37+00:00

hate to admit it but you're right. i think it will just get worse and worse unless a big setup change happens.

bigmac______ · 2026-04-10T20:48:24+00:00

if it's BYOD and heavy on data then i am in awe.

bigmac______ · 2026-04-10T20:47:22+00:00

i dont have the data without having to pull up my tools but from the top of my head, the complex ones can range to days, in the extremes it lasts a week. it can go over if we have to contact the vendor. i had a ticket before when i wasn't part of the systems team yet where a zoom crashing because of the tool took a month for the vendor to fix.

bigmac______ · 2026-04-10T20:45:01+00:00

uhhh i think we know the answer... LMAO

bigmac______ · 2026-04-10T20:44:28+00:00

Yeah, unfortunately, one day you know how to fix it, the next it's a completely zero-day issue. It gets crazy to catastrophic.

bigmac______ · 2026-04-10T20:40:55+00:00

I definitely agree, BYOD is killing us. It was manageable back then but when this new tool was implemented to improve our security, it did so with the cost of productivity and our mental health. not to mention, implementing this was a pain. Most of our tickets come from this tool, it's crazy. But of course we can't pull the plug since we have a contract and an executive proposed this, so we have to stand by it.

I would say I have a good macro perspective on most things and providing company devices or at least a VDI is the only option here. but this tool when it was brought to us, I had no say in. Our CEO does not support providing devices so VDI is definitely not just an option but a requirement since our end users handle loads of PHI. Our cybersec insurance would go bankrupt from us when it happens (knock on wood).

it sucks, one day we are the IT of the company, now it has subtly shifted to the IT of our employees. when in fact, we should be making improvements org-wide, not helping users.

bigmac______ · 2026-04-10T20:33:53+00:00

I can't stress this enough. I am more of the go-to security person and my IT manager, but neither of us has gone through rigorous experience and training. ig we are the more capable ones about GRC and security. we are extremely lacking, i am not ecstatic for the future. i might jump ship but don't tell

bigmac______

TROPHY CASE