Agent Initiated End User Enrollment; Setting Up Agent Initiated Enrollment - Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual

Agent Initiated End User Enrollment

Agent Initiated End User Enrollment
The Registration Manager is enabled for in person enrollment of end users. The
end user goes to the Registration Manager agent, who then processes the
enrollment request. The Registration Manager agent authenticates the user through
some physical means, such as a passport or drivers licence, and then the agent fills
in the enrollment form for the end user and processes the request. This method of
enrollment is called agent-initiated-end-user enrollment, face-to-face enrollment,
or in-person-certificate enrollment.
The authentication plug-in
the Registration Manager, enables agent-initiated-end-user enrollment. The
AgentDirEnrollment
this feature off by disabling or deleting the
CMS provides the following form for agent-initiated-end-user enrollment:
<server_root>/cert-<instance_id>/web-apps/ee/ra/hashDirUserEnroll.t
emplate
The enrollment form works in conjunction with the authentication plug-in. The
plug-in must be enabled for this form to work.

Setting Up Agent Initiated Enrollment

To set up in person enrollment you do the following:
• Set any policies you need. See Chapter 11, "Policies" for information about
policies.
• Customize the HTML enrollment forms. Make sure the proper authentication
method is contained in the form, and do any other customization required.
In the enrollment form you use, be sure to include the following line, and
replace
<INPUT TYPE="HIDDEN" NAME="authenticator" VALUE="myAuthMgr">
For more information on customizing the enrollment forms, see the CMS
Customization Guide.
408 Netscape Certificate Management System Administrator's Guide • February 2003
AgentDirEnrollment
plug-in is an instance of the
with the name of the authentication instance you added.
myAuthMgr
, created during the installation of
plug-in. You can turn
HashAuth
AgentDirEnrollment
instance.