Примеры использования Enrollment agent на Английском языке и их переводы на Русский язык
{-}
-
Official
-
Colloquial
Enrollment Agent(Computer).
You can install the enrollment agent certificate on a smart card.
Enrollment Agent. Used to request certificates on behalf of another subject.
When you are finished configuring enrollment agent restrictions, click OK or Apply.
An enrollment agent is a user who can enroll for a certificate on behalf on another client.
This template is used by the Network Device Enrollment Service for its enrollment agent certificate.
Exchange Enrollment Agent(Offline Request).
In the Certificate Request Wizard,click Advanced Options to select a smart card CSP for the enrollment agent certificate.
Delegated enrollment agent restrictions.
In addition, administrators can request smart card user certificates andsmart card certificates for logging on to the system on behalf of other users by using their enrollment agent certificate.
If desired, enrollment agent restrictions must be configured.
Under Permissions, click Add,type the names of the users or groups for whom you want the enrollment agent to manage the defined certificate types, and then click OK.
You can only apply enrollment agent restrictions on Windows Server 2008- based CAs.
The following procedures explain how to enroll for smart card certificates on behalf of other users andhow to prepare the enrollment station once the enrollment agent certificate is available.
An enrollment agent cannot enroll on behalf of a user for a specific certificate template.
In the Certificate Enrollment Wizard, click the Enrollment Agent certificate template and provide the requested information.
The enrollment agent has to be enrolled on behalf of other users for the enrollment agent certificate.
Restricted certificate manager or enrollment agent operations cannot be completed after a domain is renamed.
The enrollment agent and smart card logon or smart card user certificates must be configured and enabled for the certification authority(CA).
Membership in the Users group and an enrollment agent certificate are the minimum requirements to complete this procedure.
Cause: The enrollment agent certificate is configured with a Cryptography Next Generation(CNG) key, and the certificate is being requested from a Windows Server 2003- based CA.
For example, you might want to implement a restriction that the enrollment agent can only enroll for smart card logon certificates for users in a certain office or organizational unit that is the basis for a security group.
Solution: Use an enrollment agent certificate that is compatible with Windows Server 2003- based CAs, or request the certificate from a CA on a computer running Windows Server 2008 R2 or Windows Server 2008.
A user becomes an enrollment agent by enrolling for an Enrollment Agent certificate.
Once the initial Enrollment Agent certificates have been issued, the administrator of the CA can disable the issuance of Enrollment Agent certificates until it is needed again.
Unlike a certificate manager, an enrollment agent can only process the enrollment request and cannot approve pending requests or revoke issued certificates.
Browse to the enrollment agent certificate that you will use to sign the certificate request that you are processing.
Once someone has an Enrollment Agent certificate, that person can enroll for a certificate and generate a smart card on behalf of anyone in the organization.
When you create an enrollment agent, you can further refine the agent's ability to enroll for certificates on behalf of others by group and by certificate template.
Because of the powerful capability of the Enrollment Agent certificate, it is strongly recommended that your organization maintain very strong security policies for these certificates.