Setting Up Agent Initiated End User Enrollment; Managing Authentication Instances - Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual

Setting Up Agent Initiated End User Enrollment

• Mail—you can mail PINs to users, for example along with their pay stubs or
slips.
• Personal delivery—you can arrange a secure means of delivering the password
to the user, or ask the user to collect it from you in person.
Setting Up Agent Initiated End User Enrollment
The Registration Manager enables end users to enroll for a certificate in person by
going to a Registration Manager agent. This method of enrollment is identified as
agent-initiated-end-user enrollment, face-to-face enrollment, or
in-person-certificate enrollment.
The form for the agent-initiated-end-user enrollment is located here:
<server_root>/cert-<instance_id>/web-apps/ee/ra/hashDirUserEnroll.t
emplate
The enrollment form works in conjunction with an authentication plug-in, named
HashAuth
works only if an instance of the
Registration Manager's configuration, giving administrators control in deciding
whether agents should be permitted to perform certificate enrollment for end
users.
By default, the Registration Manager is enabled for the agent-initiated-end-user
enrollment method—a default instance, named
HashAuth
want to turn this feature off, then you must disable or delete the
AgentDirEnrollment
Similar to other enrollment methods, you should test this feature before asking
Registration Manager agents to start enrolling users in person. For agent
operations, you will need a valid agent certificate.

Managing Authentication Instances

This section explains how to use the CMS window to do the following:
• Configuring Authentication for End-User Enrollment
• Deleting an Authentication Instance
• Modifying an Authentication Instance
524 Netscape Certificate Management System Installation and Setup Guide • May 2002
, provided for the Registration Manager. That is, the enrollment form
plug-in is created during Registration Manager's installation. If you
instance.
authentication plug-in is enabled in the
HashAuth
AgentDirEnrollment
, of the