Creating Data Recovery Manager Agents And Administrators - Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual

the agents receive this key recovery authorization number, they can authorize this request by
going to the DRM agent services page and clicking the Authorize Recovery link.
e. Once all the agents have authorized the recovery, the next screen returns a link to download a
PKCS #12 blob containing the recovered key pair. Follow the link, and save the blob to file.
9. Restore the key to the browser's database. Import the .p12 file into the browser and mail client.
10. Open the test email. The message should be shown again.
7.7. Creating Data Recovery Manager Agents and
Administrators
When the subsystem is configured, there is a default user created with both administrator and agent
privileges.This user can perform both administrator and agent operations and access the Console and
the agent services page.
To create an additional administrator, agent, or auditor, create a user in the Certificate System instance
where the user will have privileges and assign the user to the appropriate group. An agent or auditor
must have a certificate stored in the subsystem's internal database. If the Console is configured for
SSL client authentication, all administrators must also a certificate.
To create a new user entry, do the following:
1. Log into the administrative console.
pkiconsole https://server.example.com:10443/kra
2. In the Configuration tab, select Users and Groups. Click Add.
3. Fill in the information in the Edit User Information dialog.

Creating Data Recovery Manager Agents and Administrators

181