Netscape Certificate Management System 6.2, Administrator'S Manual

Page: 406 / 874

Agent Initiated End User Enrollment
406 Netscape Certificate Management System Administrator’s Guide • June 2003
Agent Initiated End User Enrollment
The Registration Manager is enabled for in person enrollment of end users. The
end user goes to the Registration Manager agent, who then processes the
enrollment request. The Registration Manager agent authenticates the user through
some physical means, such as a passport or drivers licence, and then the agent fills
in the enrollment form for the end user and processes the request. This method of
enrollment is called agent-initiated-end-user enrollment, face-to-face enrollment,
or in-person-certificate enrollment.
The authentication plug-in
AgentDirEnrollment
, created during the installation of
the Registration Manager, enables agent-initiated-end-user enrollment. The
AgentDirEnrollment
plug-in is an instance of the
HashAuth
plug-in. You can turn
this feature off by disabling or deleting the
AgentDirEnrollment
instance.
CMS provides the following form for agent-initiated-end-user enrollment:
<server_root>/cert-<instance_id>/web-apps/ee/ra/hashDirUserEnroll.t
emplate
The enrollment form works in conjunction with the authentication plug-in. The
plug-in must be enabled for this form to work.
Setting Up Agent Initiated Enrollment
To set up in person enrollment you do the following:
• Set any policies you need. See Chapter 11, “Policies” for information about
policies.
• Customize the HTML enrollment forms. Make sure the proper authentication
method is contained in the form, and do any other customization required.
In the enrollment form you use, be sure to include the following line, and
replace
myAuthMgr
with the name of the authentication instance you added.
<INPUT TYPE="HIDDEN" NAME="authenticator" VALUE="myAuthMgr">
For more information on customizing the enrollment forms, see the CMS
Customization Guide.