Rohde & Schwarz R&S Trusted Disk 3.3.1, Руководство администратора, Страница: 14 / 49

Preparing the installation
14 Administration manual 4603.7988.02 ─ 03
3.3.1 Installing R&S Trusted Identity Manager (Standalone)
► Execute
TrustedIdentityManagerStandaloneSetup.msi
.
You have installed R&S Trusted Identity Manager (Standalone).
3.3.2 Creating a root certificate authority
The first step of creating an internal PKI is to create a root CA to validate the identity of
subordinate certificates (e.g. user certificates on smart cards).
1. Open R&S Trusted Identity Manager (Standalone).
2. Select the tab "Root Certificate".
3. Click "Create Root CA".
4. Configure the root CA.
● Country: Use only ISO 3166 Alpha-2 country codes, e.g. EN.
● Common name: This field is mandatory.
● Email: This field is checked while you type.
5. Click "Next" > "Execute".
Backup R&S Trusted Identity Manager (Standalone) data
To ensure access to the root CA, smart card information and all certificates in case the
administrator workstation does not work properly, we recommend creating a backup of
%username%\AppData\Local\Sirrix AG\TrustedIdentityManager
.
To install R&S Trusted Disk on a workstation, the root certificate of your root CA is nee-
ded (see Chapter 4.3, "Installing R&S Trusted Disk" , on page 21). The root certificate
identifies the root CA that is used to issue certificates (e.g. user certificates on smart
cards) and validates the identity of a user.
To save the root certificate, proceed as follows:
1. Select the tab "Root Certificate".
2. Click "Export Certificate".
3. Select a destination folder.
4. Click "Next" > "Execute".
The root certificate is saved as
CACertificate.crt
.
Configuring R&S Trusted Identity Manager