Page History

Configuration of internal parameters of Indeed CM Configuring internal settings for Axidian CertiFlow web applications:

Management Console

• Display system summary

• Enable custom log

  Warning
  The custom log is implemented only for system configuration using the Data Storage in Microsoft SQL and PostgreSQL.

  
  

• Own organizational structure
• Integration with Indeed Axidian Access Manager
• User's password reset in Active Directory
• Viewing card SO PIN

• Publishing certificates in the file storage

  Warning
  Publishing certificates is not supported for mounted network drives. Set the path to the file storage in the this format: \\Workstation name\Network directory name

  
  

Self-Service

• Viewing View card content
• Create TPM Virtual Smart Card (VSC)
• Enrolling Enroll Windows Hello for Business (WHfB)
• Enable downloads

Event Log:

• Define the user attribute to search in the Event Log. Default value: CN (Common name)
• Configuration of Configure connection to the Unified Event Log for several Indeed CM CertiFlow servers

Microsoft CA: Configure settings for working with Microsoft Certification Authority.

AirKey AirCard Enterprise: Configuring Configure integration with Indeed AirKey Axidian AirCard Enterprise virtual smart card server.

Client Agent: Configuring Indeed CM Configure Axidian CertiFlow Agent.

Definition of the system user catalog. 

Definition user attributes when changing which requires a certificate update.Information about users catalog and user attributes . 

The list of tracked user attributes in the settings of Microsoft CA certificate templates settings includes the following attributes by default:

• Common name
• E-mail
• User principal name

Defining access settings to system services.

Specify Definition an account to initially configure user privileges in the Roles section of Indeed CM Axidian CertiFlow Management Console. 

The Card Monitor service is intended for control of controls smart card usage. The service performsOperations:

Revocation of
• • Revoking expired temporary cards
Deactivation
• • Deactivating (optional)
of
• • cards and
revocation of
• • revoking certificates for
the
• • users
whose
• • with disabled Active Directory accounts
have been disabledRemoving
• • Deleting AD disabled accounts (optional) from
the Indeed CM user catalog whose Active Directory accounts have been disabled
• • Axidian CertiFlow users catalog
  • Revoking and withdrawing
Revocation and withdrawal
• • (optional)
of
• • cards
of users whose accounts have been removed from the Indeed CM user catalog
• • for deleted users
  • Setting/resetting a card content status (about to expire/expired)
Update of
• • Updating card contents

Event registration
• • (available if a card is updated through Axidian CertiFlow Agent and the CA operator does not approve certificates automatically)
  • Registering
• • There is no connection from the agent for a long timeevent in the system log
  • Sending
of the following
• • email notifications to
the
• • system administrators and users about the following events:
  – User certificate expiration
  – Card issuance approval/rejection
  – Approval or rejection of renewal for certificates
  – Approval or rejection of card replacement
  – Change of Indeed CM policy applying to user
  – Changing user attributes in the user directory