none
FIM 2010 add certificate for existing Smart Card RRS feed

  • Question

  • Hello,

    My question is:

    How can I add additional certificate to existing smart card that I was issue from FIM 2010 system, without damage content of Smart Card.

    My Fim Template sets for do not initialize the smart card, can add unlimited number of certificates, and Admin Pin codes the same for do administrative process for existing SC.

    Please help to add a certificate for existing Smart Card.

     

    Thanks

    Thursday, June 28, 2012 11:27 AM

Answers

  • Hi OLGN,

    • add the new certificate template to your existing Management Profile
    • enable and define the Online Update Policy in the Management Profile
    • Ensure that the user that initiates the Online Update request has "FIM CM Request Renew" Permissions on the service connection point and the target user
    • If everthing is fine you can search for the smart card and should have a new "Update this smart card" option

    Hope this helps


    /Matthias

    • Marked as answer by OLGN Sunday, July 1, 2012 7:28 AM
    Thursday, June 28, 2012 2:12 PM

All replies

  • Hi OLGN,

    • add the new certificate template to your existing Management Profile
    • enable and define the Online Update Policy in the Management Profile
    • Ensure that the user that initiates the Online Update request has "FIM CM Request Renew" Permissions on the service connection point and the target user
    • If everthing is fine you can search for the smart card and should have a new "Update this smart card" option

    Hope this helps


    /Matthias

    • Marked as answer by OLGN Sunday, July 1, 2012 7:28 AM
    Thursday, June 28, 2012 2:12 PM
  • Hello Matthias, First of all thanks for your answer, it help me. Another question that I have: Can I add certificate from FIM 2010 system to Smart Card that not issue/ manage from FIM 2010? (For this SC I have the Admin Pin Code) The not "manage" Smart Card have the own certificates and I don’t want to damage this certificates just wont to add another one via FIM 2010 Thanks,
    Sunday, July 1, 2012 7:27 AM
  • hi OLGN,

    this sounds to be a difficult one. I never did this before. You may play with the "Maximum number of external certificates" in the Management Profile's "General Settings"

    1. Import the foreign certifcate into FIM CM using clmutil.exe (see here)
    2. Issue a new smart card with FIM2010 using a Management Profile that supports external certificates

    /Matthias

    Monday, July 2, 2012 10:09 AM
  • OK, I wiil try and inform you !

    Thanks

    Tuesday, July 10, 2012 7:24 AM