Q-See Remote Client Software V 4.0.1 Specifiche Scaricare il pdf (Pagina 107)

VMware, Inc. 107

Chapter 5 Client Management

Obtaining a Root Certificate

YoumustobtaintherootcertificatefromtheCAthatsignedthecertificatesonthesmart

cardspresentedbyyourusers.Therootcertificateisobtainedfromoneofthefollowing

sources:

 MicrosoftIISserverrunningMicrosoftCertificateServices.Theprocedurefor

installingMicrosoftIIS,issuingcertificates,anddistributingtheminyour

organizationexceedsthescopeofthisguide.RefertothefollowingWebresources

tolearnmoreaboutthesetasks:

 HowtoInstallIISonWindowsServer2003:

http://technet.microsoft.com/library/aa998483.aspx

 ManagingMicrosoftCertificateServices:

http://technet.microsoft.com/library/bb727098.aspx

 Thepublicrootcertificateofatrustedthird‐partyCA.Thisisthemorelikely

sourceinenvironmentswithapre‐existingsmartcardinfrastructureanda

standardizedapproachtosmartcarddistributionandauthentication(forexample,

governmentalormilitaryestablishments).

Onceyouhavedeterminedthecorrectcertificatetobeused,

thesigningchainwilllist

aseriesofsigningauthorities.Usuallythebestcertificatetoselectistheintermediate

authorityimmediatelyabovetheusercertificate.Checkthatthisisnotusedtosign

othercertificatesonthecard.

Exporting a Root Certificate from a User Certificate

IfyoudonothavetherootcertificateoftheCAbuthavebeenprovidedwithaCA

signedusercertificate,orasmartcardthatcontainsone,youcanexporttheroot

certificatefromthisinformationiftherootcertificateistrustedbyyoursystem.

To export a root certificate from a user certificate

1StartInternetExplorerandclick

Tools>InternetOptions.

2UndertheContenttab,clickCertificates.

NOTEIfyouhavebeenprovidedwithasmartcardthatcontainsausercertificate,

insertthesmartcardintothereader.Inmanycasesthiswillautomaticallyaddtheuser

certificatetoyourpersonalstore.Ifthisdoesnothappenyoumustusethesoftwarethat

accompaniesthereaderto

exporttheusercertificatetoafilewhichyoucanthenimport

intoInternetExplorerduringthefollowingprocedure.

1 2 ... 102 103 104 105 106 107 108 109 110 111 112 ... 231 232

Nessun commento

Q-See Remote Client Software V 4.0.1 Specifiche Pagina 107