Entrust Managed Services PKI: Windows Smart Card Logon ...

More documents

Recommendations

Info

Obtaining the Entrust configuration tools for Windows Smart Card Logon Entrust created tools to help with the configuration of Smart Card Logon. These tools include: • getGUID.bat and getGUID.vbs: This tool extracts the fully qualified host name and the Global User ID (GUID) in the correct, dashed format, from the Domain Controller for inclusion in a Domain Controller certificate. • installCerts.bat and installCerts.vbs: This tool helps you to install the certification authority (CA) certificate(s) as a trust anchor for Smart Card Logon. It can also install a Domain Controller certificate if Entrust Entelligence Security Provider for Windows is not being used. These tools must be saved to a folder on your Domain Controller. Complete the following procedure to download the SmartCardLogonTools.zip file that contains the tools. To obtain the Entrust configuration tools for Windows Smart Card Logon 1 Log in to Administration Services. See “To log in to Administration Services” on page 13 for more information. 2 From the left pane under Help, click Smart Card Logon tools. The File Download dialog box appears. 10 Entrust Managed Services PKI Windows Smart Card Logon Configuration Guide Document issue: 1.0 Report any errors or omissions
3 Click Save to save the files to a folder on your Domain Controller. Files in the zip include: • getGUID.bat and getGUID.vbs • installCerts.bat and installCerts.vbs 4 Extract the files so they are available to run in the following procedure. Configuring for Windows Smart Card Logon Report any errors or omissions 11
Page 1 and 2: Entrust Managed Services PKI Entrus
Page 3 and 4: TOC Overview . . . . . . . . . . .
Page 5 and 6: 1 Overview This guide documents how
Page 7 and 8: 3 The smart card client software se
Page 9: 2 Configuring for Windows Smart Car
Page 13 and 14: Creating a Domain Controller certif
Page 15 and 16: You successfully logged in to Admin
Page 17 and 18: 6 From the User Information section
Page 19 and 20: Note: If you navigated away from th
Page 21 and 22: 4 In the Subject Alternative Naming
Page 23 and 24: Enrolling the certificate for the D
Page 25 and 26: 7 Click Yes to request a certificat
Page 27 and 28: 2 From the left pane under CA Certi
Page 29 and 30: To run the installCert.bat 1 Naviga
Page 31 and 32: 3 From the User Type drop-down list
Page 33 and 34: directory when you signed up for En
Page 35 and 36: 15 Scroll down to the bottom of the
Page 37 and 38: 17 Click Submit. A success message
Page 39 and 40: 4 Complete Step 13 on page 33 to St
Page 41 and 42: 4 Based on your search results, sel
Page 43 and 44: Smart Card Logon in Vista Windows V

Entrust Managed Services PKI: Windows Smart Card Logon ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?