Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

1. Login to the system under service account (serviceca) and open the Certificates tool for the User.
2. Run the New certificate issuance wizard.
3. Select the Enrollment Agent certificate type, maximize the Details section and click Properties button, see Figure 5.

Image Modified

Figure 5 – Properties of Enrollment Agent template.

4. Switch to the Private key tab and expand the Key options menu and activate Make private key exportable option. See Figure 6.

Image Modified

Figure 6 – Properties of Enrollment Agent template - Private Key.

5. Move the issued certificate and its private key to certificate storage of the PC, where Indeed CM server is deployed.
6. Allow the service user (serviceca) to read the private key of Enrollment Agent certificate.

  • To do so, right-click the certificate in the Certificates tool of the PC.
  • Select All tasksManage Private Keys...
  • Item, click Add, specify the service account (serviceca).
  • Set Full control option.
  • Click Apply.