Introduction; Prerequisites; Installing A Certificate Authority (Ca) - HP Compaq t5135 Supplementary Manual

Introduction

Smart cards can provide additional security to a thin client network. This paper provides instructions for
configuring a smart card with your HP Compaq t5000 thin client.

Prerequisites

The following items are required to use a smart card with HP Compaq t5000 thin clients:
•
Reflex USB V2 Smart Card Reader from Schlumberger.
•
Certification Authority (CA): You must prepare smart cards before using them. Each smart card
requires a certificate. To get that certificate on each smart card, you need a certification authority
(CA).
•
An Enterprise CA server: To issue smart card certificates, you need an Enterprise CA server.
NOTE: The configuration of the CA is not significant with regard to
simply issuing the smart card logon certificates. However, the
configuration may be important depending on the other uses you plan
for your CA.

Installing a Certificate Authority (CA)

To install a CA, perform the following steps:
1. Log on as a member of the Enterprise Admins group.
2. Select Start > Control Panel > Add/Remove Programs and click Add/Remove Windows
Components.
3.
From the list of Windows components, select the Certificate Services option and follow the wizard to
install. A message warns that after installing, a machine name or domain membership cannot be
changed due to the binding of the machine name to the CA information stored in the Active Direc-
tory. After you ensure that the proper machine name and domain membership are configured click
Yes, and click Next.
4.
From the CA Type selection box ensure that you are installing an Enterprise root CA and click Next.
2