QUESTION:
What amount of data is stored in Active Directory (for EA/ESSO and
Indeed CM) or SQL (for Indeed CM) per user?
Answer:
Indeed EA/ESSO
The amount of data depends on the number of registered authenticators
for each user and total size of all SS...
This article deals with various methods of user authentication in
enterprise web resources.
The screenshots used in the article are made with IE11 and IIS10.
USERNAME AND PASSWORD AUTHENTICATION
This is the most simple and the most evident method. The...
PROBLEM:
When a smart card with Microsoft CA certificates on it is connected
to a workstation, the certificates are not registered with the user
private storage in Certificates snap in.
SOLUTION:
Make sure that the CERTIFICATE PROPAGATION SERVICE is e...
QUESTION:
Error when running PowerShell scripts:_ FILE CANNOT BE LOADED BECAUSE
THE SCRIPT IS DISABLED_.
ANSWER:
To enable working with PowerShell scripts, enter the following
command: _set-executionpolicy unrestricted_
To disable Powershell scripts, ...
QUESTION:
How a document is signed with a certificate when Indeed AirKey is
used?
Answer:
To sign a document with digital signature, the document (a letter,
file etc.) in question is hashed at first by standard means Microsoft
Base CSP
[https://docs.m...
The Indeed CM system consists of a set of web services that are
deployed at the Microsoft Internet Information Services platform. The
system resilience is provided for by IIS capabilities: several servers
can be combined into a cluster and work as one, di...
When deploying Indeed CM, you have to set up the usage of service
account certificates to work with certification authorities (CA).
Indeed CM server needs a certificate to interact with CA. The server
“communicates” with CA using this certificate, i.e. ...
QUESTION:
Please specify your recommendations for provision of Indeed CM and
EA/ESSO server resilience. Is it efficient to backup the servers and
what components need to be backed up?
Please advise the best course of action in case of, say, server
failure...
It is required to deploy Internet Information Services role with a
certain set of modules on the server before installing Indeed
Enterprise Management Console and Indeed Certificate Manager.
Microsoft .NET is to be installed as well. Sequence of installat...
PROBLEM:
The certificate written to a card with Indeed CM is displayed as
untrusted in Windows Server 2008R2/2012/2012R2, Windows 7SP1, Windows
8/8.1
SOLUTION:
Probably, the length of certificate private key is less than 1024
bits.
Currently, Window...
Question:
The certificate used to work with CA is about to expire. How should I
update it properly?
Answer:
The certificate update procedure depends on the certification
authority used. Below are the examples for Microsoft Enterprise CA
certificates.
MI...
Note that smart card usage in terminal sessions is limited to cards
connected to client workstation. Smart cards connected to terminal
server cannot be used in terminal session. This is limitation of
terminal service.
In some cases, you have to install sm...
