Re: [Ejbca-develop] Enroll certificates doubts

[Tomas G. <to...@pr...>]

Hi Maurício,

Browser enrollment is a chapter in itself, and combining with smart
cards adds an additional layer of complexity.

Currently IE and FireFox (not Edge, not Chrome since v49) support
certificate enrollment using the web browser. Then for the smart card it
depends on the smart card drivers if enrollment using the card is
supported. You have a smart card middle-ware installed, and this needs
to support it.

It works with browsers for a few tokens, but for large scale enrollment
to smart cards and Token Management System should be used. We have some
examples documented.

https://www.ejbca.org/complementary.html#Token%20Management


You are not allowed to enroll twice using the same username/enrollment
code. It is by design a "one-time enrollment code".

You can find information about the in the FAQ and documentation.
https://www.ejbca.org/docs/faq.html#errorUserStatus

Cheers,
Tomas
-----
Save time and money with an Enterprise support subscription. Please see
www.primekey.se for more information.
https://www.primekey.se/technologies/products-overview/
https://www.primekey.se/service-support/support/

On 2016-04-25 01:12, Maurício Giacomini Penteado wrote:
> I get success to my first question runing the enroll in IE. It should be
> cause activex components that this code process.
> 
> Kind regards,
> Maurício Giacomini Penteado
> 
> ------------------------------------------------------------------------
> From: mau...@ho...
> To: ejb...@li...
> Date: Fri, 22 Apr 2016 23:31:04 +0000
> Subject: [Ejbca-develop] Enroll certificates doubts
> 
> Dear friends
> 
> I am trying put the initial superadmin certificate on a smartcard. I
> read in installation document that just putting the instruction
>  "superadmin.batch=false" in web.properties works. But doing it I just
> got a superadmin certificate as a software security device. Somebody
> knows and can help me about how can I get enroll the initial superadmin
> certificate directly in smartcard device?
> 
> Other thing I am having difficulty is that I understood reading the
> installation doc that if I want enroll other superadmin certificate with
> "superadmin.batch=false" is just enroll other time with the correct
> username and password that another superadmin certificate will be
> generated but trying I receive an error: Wrong user status! To generate
> a certificate for a user the user must have status New, Failed or In
> process. To me this process just works once how can I do it more than
> one time?
> 
> Kind regards,
> Maurício Giacomini Penteado
> 
> 
>  
> 
> 
> 
> ------------------------------------------------------------------------------
> Find and fix application performance issues faster with Applications
> Manager Applications Manager provides deep performance insights into
> multiple tiers of your business applications. It resolves application
> problems quickly and reduces your MTTR. Get your free trial!
> https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
> _______________________________________________ Ejbca-develop mailing
> list Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
> 
> 
> ------------------------------------------------------------------------------
> Find and fix application performance issues faster with Applications Manager
> Applications Manager provides deep performance insights into multiple tiers of
> your business applications. It resolves application problems quickly and
> reduces your MTTR. Get your free trial!
> https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
> 
> 
> 
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>