none
FIM CM Certificate Recovery on Behalf RRS feed

  • Question

  • Cannot find the place on FIM CM Portal where I could recover the profile of the subscriber.

    I guess that should go to "Find a user to view or manage their information" and after type the subscriber username name and get his profile info, there should be an option to recover his profile.

    But not. 

    Found this link with kind of the same question.

    http://social.technet.microsoft.com/Forums/en-US/e4478fe8-238b-4723-89c2-a52a22125ae5/certificate-recovery?forum=ilm2

    By the way, I guess that KRA is working fine because the Recover Management Policy is working fine.

    not sure if I am lost on the Portal Interface because I am pretty sure that My Recover on Behalf account have enough permissions on AD.

    Andres Z.


    andresz

    Saturday, March 29, 2014 12:01 AM

All replies

  • On Sat, 29 Mar 2014 00:01:36 +0000, andresz wrote:

    By the way, I guess that KRA is working fine because the Recover Management Policy is working fine.

    not sure if I am lost on the Portal Interface because I am pretty sure that My Recover on Behalf account have enough permissions on AD.

    If you're sure that you've got the permissions set correctly, and you're
    also sure that you're not trying this with a profile or smart card that
    belongs to the account you're using to access the portal, then your problem
    is likely that the card or profile you're working with is not in the
    retired or disabled state. You can only execute the recover on behalf
    policy against a card or profile that is either disabled or retired.


    Paul Adare - FIM CM MVP
    Arnold Schwarzenegger virus : Terminates and stays resident. It'll be back.

    Sunday, March 30, 2014 11:54 AM
  • Paul, thanks for the tip. I didn't know that.

    Now my problem is that this is a not a Smart Card Profile, its a Software Profile (for encryption purposes, EFS and SMIME), so there is not Retire or Disable Management Policies, just Suspend and Reinstate and Revoke Policies.

    Thanks again.



    andresz

    Sunday, March 30, 2014 5:32 PM
  • On Sun, 30 Mar 2014 17:32:49 +0000, andresz wrote:

    Now my problem is that this is a not a Smart Card Profile, its a Software Profile (for encryption purposes, EFS and SMIME), so there is not Retire or Disable Management Policies, just Suspend and Reinstate and Revoke Policies.

    Revoke, the Recover on behalf.


    Paul Adare - FIM CM MVP
    [Discordianism is] a shadowy, formless anarchoterrorist cult ... a cancer
    which has spread widely all over the Information Superhighway. ... its
    tentacles reach everywhere. -- Concerned Citizens for a Safe Internet

    Sunday, March 30, 2014 6:02 PM