Enrolling A New Security Officer - Red Hat CERTIFICATE SYSTEM 8.0 - MANAGING SMART CARDS WITH THE ENTERPRISE SECURITY CLIENT 1-23-2010 Manual

Chapter 4. Using Security Officer Mode
i. Edit the esc-prefs.js file again, and this time change the esc.security.url parameter
to point to the security officer workstation page.
pref("esc.security.url","https://server.example.com:7889/cgi-bin/sow/welcome.cgi");
j. Restart the Enterprise Security Client again. The UI now points to the security officer
workstation to allow security officers to enroll tokens for regular users.
To disable security officer mode, close the Enterprise Security Client GUI, stop the escd process,
and comment out the esc.securty.url and esc.disable.password.prompt lines in the esc-
prefs.js file. When the esc process is restarted, it starts in normal mode.

4.2. Enrolling a New Security Officer

Security officers are set up using a separate, unique interface than the one for regular enrollments or
the one used for security officer-managed enrollments.
1. Make sure the esc process is running.
esc
Then open the Enterprise Security Client UI.
With security officer mode enabled in theesc-pref.js file
Officer Mode") the security officer enrollment page opens.
2. In the Security Officer Enrollment window, enter the LDAP user name and password of the new
security officer and a password that will be used with the security officer's smart card.
42
(Section 4.1, "Enabling Security