Configuring the system

Configuring internal settings for Axidian CertiFlow web applications:

Management Console

• Display system summary

• Enable custom log

  The custom log is implemented only for system configuration using the Data Storage in Microsoft SQL and PostgreSQL.
• Organization structure
• Integration with Axidian Access

• Internal document management

• User's password reset in Active Directory
• Viewing card SO PIN

• Publishing certificates in the file storage

  Publishing certificates is not supported for mounted network drives. Set path to the file storage in this format:

  \\Workstation name\Network directory name

Self-Service

• View card content
• Create TPM Virtual Smart Card (VSC)
• Enroll Windows Hello for Business (WHfB)
• Enable downloads

Event Log:

• Define the user attribute to search in the Event Log. Default value: CN (Common name)
• Configure connection to Unified Event Log for several CertiFlow servers

Microsoft CA: Configure settings for working with Microsoft Certification Authority.

AirCard Enterprise: Configure integration with Axidian AirCard Enterprise virtual smart card server.

Agent: Configure Axidian CertiFlow Agent.

Information about users catalog and user attributes . 

The list of tracked user attributes in Microsoft CA certificate templates settings includes the following attributes by default:

• Common name
• E-mail
• User principal name

Defining access settings to system services.

Specify an account to configure user privileges in Roles of Axidian CertiFlow Management Console. 

Card Monitor service controls smart card usage. Operations:

• • Revoking expired temporary cards
  • Deactivating cards and revoking certificates for users with disabled Active Directory accounts (optional)
  • Deleting disabled Active Directory accounts from Axidian CertiFlow users catalog (optional)
  • Revoking and withdrawing cards for deleted users (optional)
  • Setting/resetting a card content status (about to expire/expired)
  • Updating card contents (available if a card is updated through Axidian CertiFlow Agent and the CA operator does not approve certificates automatically)
  • Registering There is no connection from the agent for a long time event in the system log
  • Removing inactive agents (you can set the time when an agent is considered inactive)
  • Sending email notifications to system administrators and users about the following events:
    • Expiring user certificates
    • Approve/reject to issue a card
    • Approve/reject to renew a certificate
    • Approve/reject to replace a card
    • Modifying a system policy applied to a user
    • Changing user attributes in users catalog 

For Card Monitor service to work properly, create a service role with an account for Card Monitor in Roles section and define the following privileges for the role:

• Disabling a card
• Updating a card
• Canceling a card update
• Revoking a card
• Cleaning a card
• Unassigning a card
• Removing a card

• Removing AirCard

• Removing an agent

• Removing a record from custom log

  Set privileges to work with virtual smart cards, if AirCard integration is configured.

Summary of all Configuration Wizard settings.

After you click Apply, the specified values for all settings will be saved in configuration files for all applications and stored in the C:\inetpub\wwwroot\cm\wizard\configs folder.

Information about saving the specified values to the service configuration files.

You can upload the configuration files to an archive (Save configuration files option) to transfer and apply the settings to the system server.

When installing Axidian CertiFlow for the first time, save a copy of your configuration settings (Backup current configuration settings option).

To deploy new system servers, upload the backup file in Restore configuration section of the wizard.