Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual page 354

Chapter 14. Managing Certificate System Users and Groups
14.3.2.1. Creating Users
1. Log into the administrative console.
pkiconsole https://server.example.com:admin_port/subsystem_type
2. In the Configuration tab, select Users and Groups. Click Add.
3. Fill in the information in the Edit User Information dialog.
Most of the information is standard user information, such as the user's name, email address,
and password. This window also contains a field called User State, which can contain any string,
which is used to add additional information about the user; most basically, this field can show
whether this is an active user.
It is necessary to select the group to which the user will belong. The user's group membership
determines what privileges the user has. Assign agents and administrators to the appropriate
subsystem group.
4. Store the user's certificate.
a. Request a user certificate through the CA or RA end-entities service pages.
b. If auto-enrollment is not configured for the user profile, then approve the certificate request.
c. Retrieve the certificate using the URL provided in the notification email, and copy the base-64
encoded certificate to a local file or to the clipboard.
d. Select the new user entry, and click Certificates.
e. Click Import, and paste in the base-64 encoded certificate.
332