Setting up a Digi-Access™ user requires a Windows Local or Active Directory Domain (depending on the Windows Server configuration) User account, and a Digi-Access™ [1] certificate containing the public key.
Based on the TTM™ [2] (Total Trust Management) agreement between Digi-Sign and the company which uses
Digi-Access™ facility, Digi-Sign will automatically send the user’s Digi-Access™ Certificate containing only the public key to the Digi-Access™ Administrator.
The user's Digi-Access™ Certificate file will be sent as an email attachment and should be saved on/uploaded to the Windows Server where the Digi-Access™ has been installed.
Further actions with the user's Digi-Access™ Certificate will be described later in this document in section 4.2.
Depending on your Windows Server setup you can choose a Windows Local User Account setup, section 3.1.1 or if you have a Windows Active Directory present, you may choose Windows Active Directory User Account setup, section 3.1.2.
Log on as an Administrator to the Windows Server where Digi-Access™ is setup and:
Go to Windows Administrative Tools.
- Start Computer Management.
- From the Computer Management (Local) tree, select Local Users and Groups.
- Right click on Users and choose New user from the menu.
- Provide User Name, for example: user1
- Provide Full Name, which will be the first and the last name of the end user.
- Provide a short Description for the user account, for example: Digi-Access user
- Provide and confirm the Password for the user account. You also need to write down this password for later usage – this password will be needed when a Digi-Access™ Client Certificate Mapping will be setup on IIS 5.x+, which is described later in this document in section 4.2.
- Ensure that the User must change password after first log on option is disabled.
- Ensure that the User cannot change password and Password never expires options are enabled.
- Complete the setup by clicking the Create button and then click the Close button.
The Windows Local User Account is now created.
Links:
[1] http://www2.digi-sign.com/digi-access
[2] http://www2.digi-sign.com/service/certificate+authority+management+services#ttm