Using Security Officers To Manage Users; Enrolling A New User - Red Hat CERTIFICATE SYSTEM 8.0 - MANAGING SMART CARDS WITH THE ENTERPRISE SECURITY CLIENT 1-23-2010 Manual

Chapter 4. Using Security Officer Mode
\!
3. Click Enroll My Smartcard.
This produces a smart card which contains the certificates needed by the security officer to access the
Enterprise Security Client security officer , so that regular users can be enrolled and managed within
the system.

4.3. Using Security Officers to Manage Users

The security officer Station page manages regular users through operations such as enrolling new or
temporary cards, formatting cards, and setting the Phone Home URL.

4.3.1. Enrolling a New User

There is one significant difference between enrolling a user's smart card in security officer mode
Section 3.5, "Enrolling a Smart Card Automatically"
and the process in
Smart Cards". All processes require logging into an LDAP database to verify the user's identity, but the
security officer mode has an extra step to compare some credentials presented by the user against
some information in the database (such as a photograph).
1. Make sure the esc process is running. If necessary, start the process.
esc
Also, make sure that security officer mode is enabled, as described in
Security Officer Mode".
2. Then open the Enterprise Security Client UI.
NOTE
Ensure that there is a valid and enrolled security officer card plugged into the
computer. A security officer's credentials are required to access the following pages.
44
Section 3.6.6, "Enrolling
and
Section 4.1, "Enabling