Digi-Sign, The Certificate Corporation
Published on Digi-Sign, The Certificate Corporation (http://www2.digi-sign.com)

Home > Digi-Access™ User Configuration

By Digi-Sign
Created Feb 19 2008 - 11:54

Digi-Access™ User Configuration

Setting up a Digi-Access™ User

Setting up a Digi-Access™ user requires a Windows Local or Active Directory Domain (depending on the Windows Server configuration) User account, and a Digi-Access™ [1] certificate containing the public key.

Based on the TTM™ [2] (Total Trust Management) agreement between Digi-Sign and the company which uses
Digi-Access™ facility, Digi-Sign will automatically send the user’s Digi-Access™ Certificate containing only the public key to the Digi-Access™ Administrator.
The user's Digi-Access™ Certificate file will be sent as an email attachment and should be saved on/uploaded to the Windows Server where the Digi-Access™ has been installed.

Further actions with the user's Digi-Access™ Certificate will be described later in this document in section 4.2.

  • 4.1 Setting up a Windows Local/Active Directory Domain User Account
  • Depending on your Windows Server setup you can choose a Windows Local User Account setup, section 3.1.1 or if you have a Windows Active Directory present, you may choose Windows Active Directory User Account setup, section 3.1.2.

      4.1.1 Setting up a Windows Local User Account

      Log on as an Administrator to the Windows Server where Digi-Access™ is setup and:

      Go to Windows Administrative Tools.
      - Start Computer Management.

      IMAGE


      - From the Computer Management (Local) tree, select Local Users and Groups.
      - Right click on Users and choose New user from the menu.

      IMAGE



      - Provide User Name, for example: user1
      - Provide Full Name, which will be the first and the last name of the end user.
      - Provide a short Description for the user account, for example: Digi-Access user
      - Provide and confirm the Password for the user account. You also need to write down this password for later usage – this password will be needed when a Digi-Access™ Client Certificate Mapping will be setup on IIS 5.x+, which is described later in this document in section 4.2.
      - Ensure that the User must change password after first log on option is disabled.
      - Ensure that the User cannot change password and Password never expires options are enabled.
      - Complete the setup by clicking the Create button and then click the Close button.

      The Windows Local User Account is now created.

  • IIS Implementation Guide

Source URL: http://www2.digi-sign.com/support/digi-access/iis-section4

Links:
[1] http://www2.digi-sign.com/digi-access
[2] http://www2.digi-sign.com/service/certificate+authority+management+services#ttm