IIS Implementation Guide

Guide to implementing Digi-Access™ on IIS

Examples of how the Digi-Mail™ enrolment forms can be customised

The Digi-Mail™ End Entity Digital Certificate Enrolment Form uses basic HTML programming that can be altered to match your specific design requirements. Below are some samples of customised enrolment pages:




Descriptions of the Digi-Access™ invitations options
Digi-Access™ certificates are issued according to the Enrolment Policy. The first stage is the Inviting stage that is controlled by the End Entity Account Manager interface in Digi-CA™. There are three options:

Digi-Access™ Certificate Support

This is the main Digi-Access™ Help page for end users and provides all the support pages you require to own and use your Digi-Access™ two factor authentication certificates. For Administrator help and instructions, view the Digi-Access™ Administrator support section.

Digi-Access™ Help & Support Resources

The Digi-CA™ Certificate Authority [CA] system that issues the Digi-Access™ end user certificates is compatible with most commonly used browsers. These support pages are provided for users that want to understand more about screen warnings and/or other browser events.

All Users

Step 3 - Issuing Digi-Access™ Certificates to the End Users

The Digi-CA™ Certificate Authority [CA] system (that issues the Digi-Access™ end user certificates) can issue thousands of certificates every hour.

Step 1 - Changing the Login Page to require Digi-Access™

Depending on how you decide to implement Digi-Access™ will dictate whether you need a new login page or not.

Step 2 - Configuring Digi-Access™ on the Server

The instructions below are for the two most popular servers (i.e. IIS and Apache). If you are using different web server software, use the online contact form for Support and they will supply the instructions for your server.

Allow 30 Minutes

Enabling Enabling Digi-Access™ Two Factor Authentication on IIS 5.x+ web server

To enable Client Certificate Authentication on IIS 5.x+ you will need to obtain Certification Authority [CA] Certificates, your own Digi-Access™ Client Certificate and setup a local user (or Active Directory Domain) account on a Windows Server that the IIS 5.x+ web server is installed and running on.

Digi-Access™ - Revoking an end user certificates

Allow
<1 Minute
 
     

Enabling Client Certificate Authentication on IIS 5.x+ web server

To enable Client Certificate Authentication on IIS 5.x+ you will need to obtain Certification Authority [CA] Certificates, your own Digi-Access™ Client Certificate and setup a local user (or Active Directory Domain) account on a Windows Server that the IIS 5.x+ web server is installed and running on.

2.1 Obtaining and installing the Digi-Access™ Certification Authority Certificates