Versions Compared

Old Version 10

changes.mady.by.user Mikhail Yakovlev

Saved on

compared with

New Version 11

changes.mady.by.user Mikhail Yakovlev

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

To issue AirKey cards in Indeed Certificate Manager, you have to configure the connection to Indeed AirKey Enterprise server and define parameters for working with it.

To do so, proceed as follows:

  1. Run the Indeed CM Setup Wizard on the Indeed CM server and switch to AirKey Enterprise section.
  2. Enable integration with Indeed AirKey Enterprise.
  3. Specify the link and port to connect to server in the URL of connection to AirKey Enterprise server. Make sure that the port is open for incoming connections in the firewall of AirKey server.
  4. Specify the thumbprint of the certificate for workstation with Indeed CM server installed in the Certificate thumbprint field.
  5. The Lifetime of unregistered AirKey Enterprise smart cards in seconds defines the period of life for unregistered AirKey cards. After it expires, the said cards are marked as to be deleted by Indeed CM Card Monitor service. Default value is 120 seconds. The figure below shows an example of parameters for connection to Indeed AirKey Enterprise server.

Warning

The Extended Key Usage of the certificate should contain Clien Client Authentication value.
The IIS_IUSRS group (for IIS 7.0) or IIS AppPool\IndeedCM account (for IIS 7.5 and later) should have Read right for the private key of the certificate.

6. Switch to Confirmation section and click Apply to save the settings. It is highly recommended to save a backup copy of Indeed Certificate Manager file with parameters of connection to Indeed AirKey Enterprise.