Entrust Managed Services PKI: Windows Smart Card Logon ...

More documents

Recommendations

Info

Distributing the CA certificate(s) to the trusted root store of all Domain Controllers All parties must trust the root certification authority (CA) certificate. If your certificates were issued by a subordinate CA, the subordinate (or issuing) CA certificate must be trusted as well. To distribute the root CA certificate and, if applicable, the issuing CA certificate, to the trusted root store of all Domain Controllers, you must complete the following procedures. • “Downloading the certification authority certificate(s)” on page 26 • “Running the Entrust installCert.bat” on page 28 This tool adds the CA(s) to the trusted roots in an Active Directory Group Policy Object and adds the CA issuing the CA certificate to the NTAuth Store in Active Directory. Downloading the certification authority certificate(s) Download the root certification authority (CA) certificate, and if applicable, the issuing CA certificate, to your Domain Controller through Enrollment Server for Web. • “To download the root CA certificate through Enrollment Server for Web” on page 26 • “To download the issuing CA certificate through Enrollment Server for Web” on page 28 To download the root CA certificate through Enrollment Server for Web 1 On your Domain Controller, enter the Enrollment Server for Web URL provided by Entrust Managed Services PKI into a supported Internet Explorer browser. https:///cda-cgi/clientcgi.exe?action=start where is the URL of your Entrust Managed Services PKI. The following page appears. 26 Entrust Managed Services PKI Windows Smart Card Logon Configuration Guide Document issue: 1.0 Report any errors or omissions
2 From the left pane under CA Certificates, click Install. The File Download dialog box appears. 3 Click Save and complete the following: • If the root CA and issuing CA are one and the same (the root CA is the issuer of your certificates), save the file as caCert.crt. • If the root CA and issuing CA are separate CAs, save the root CA certificate as rootCACert.crt. Configuring for Windows Smart Card Logon Report any errors or omissions 27
Page 1 and 2: Entrust Managed Services PKI Entrus
Page 3 and 4: TOC Overview . . . . . . . . . . .
Page 5 and 6: 1 Overview This guide documents how
Page 7 and 8: 3 The smart card client software se
Page 9 and 10: 2 Configuring for Windows Smart Car
Page 11 and 12: 3 Click Save to save the files to a
Page 13 and 14: Creating a Domain Controller certif
Page 15 and 16: You successfully logged in to Admin
Page 17 and 18: 6 From the User Information section
Page 19 and 20: Note: If you navigated away from th
Page 21 and 22: 4 In the Subject Alternative Naming
Page 23 and 24: Enrolling the certificate for the D
Page 25: 7 Click Yes to request a certificat
Page 29 and 30: To run the installCert.bat 1 Naviga
Page 31 and 32: 3 From the User Type drop-down list
Page 33 and 34: directory when you signed up for En
Page 35 and 36: 15 Scroll down to the bottom of the
Page 37 and 38: 17 Click Submit. A success message
Page 39 and 40: 4 Complete Step 13 on page 33 to St
Page 41 and 42: 4 Based on your search results, sel
Page 43 and 44: Smart Card Logon in Vista Windows V

Entrust Managed Services PKI: Windows Smart Card Logon ...

Create successful ePaper yourself

Delete template?

Save as template?