Re-Enrolling Tokens; Diagnosing Problems - Red Hat CERTIFICATE SYSTEM 8.0 - MANAGING SMART CARDS WITH THE ENTERPRISE SECURITY CLIENT 1-23-2010 Manual

5. If the TPS has been configured for user authentication, enter the user credentials in the
authentication dialog, and click Submit.
If the TPS has been configured to archive keys to the DRM, the enrollment process will begin
generating and archiving keys.
When the enrollment is complete, the status of the smart card is displayed as ENROLLED.

3.6.7. Re-Enrolling Tokens

Commonly, a smart card will need to be re-enrolled while the certificates on it are still active. The smart
card may be reused for a new user, or the certificates may be nearing their expiration date so the
original user is having the smart card re-enrolled during the grace period.
The enrollment process does not automatically revoke active certificates, so enrolling a token without
removing its active certificates will leave the old certificates active.
Before re-enrolling a token, the agent or officer must either manually revoke the certificates on the
token or format the card again to return it to an unintialized state. Formatting a token automatically
removes and revokes its old certificates.
Formatting a token is described in

3.7. Diagnosing Problems

The Enterprise Security Client includes basic diagnostic tools and a simple interface to log errors and
common events, such as inserting and removing a smart card or changing the card's password. The
diagnostic tools can identify and notify users about problems with the Enterprise Security Client, smart
cards, and TPS connections.
To open the Diagnostics Information window:
1. Open the Enterprise Security Client.
Section 3.6.1, "Formatting the Smart
Re-Enrolling Tokens
Card".
33