Setting Up Privileged UsersChapter 13 Managing Privileged Users and Groups 391Setting Up AgentsYou need an agent for each subsystem installed in a given CMS instance. Tounderstand the role of an agent, see “Agents” on page 373. This section explainshow to add agents to a CMS instance.You can set up agents for a CMS instance in two ways:• Setting up Agents Using the Automated Process• Setting up Agents Using the Manual ProcessSetting up Agents Using the Automated ProcessCertificate Management System automates the process of setting up agents ifagents request their certificate using the manual enrollment form. The automatedprocess is built into the request-approval form (the page that displays the pendingrequest) in the Agent Services interface and it enables the person who has bothCertificate Manager agent and Administrator privileges to create new agents for aCMS instance—that is, the Certificate Manager agent who approves new agents’certificate requests must belong to both Certificate Manager Agents andAdministrators groups in the internal database of the Certificate Manager.The request-approval form includes a checkbox labeled “This certificate is for a agent”, where indicates Certificate Manager,Registration Manager, or Data Recovery Manager. Selecting the checkbox indicatesthat the user who has requested the certificate should be made an agent for thespecified subsystem. Selecting the checkbox also requires the Certificate Manageragent to specify a user ID for the new agent.If the Certificate Manager agent approves the certificate request with the checkboxselected and user ID specified, the server automatically adds the user as an agent toits internal database, copies the user’s client certificate to the database, andassociates the certificate with the new user’s entry.If you want to test this feature, follow these steps:1. Open a web browser window.2. Access the end-entity interface.3. In the Enrollment tab, under Browser, select Manual.4. In the enrollment form that appears, enter sample data and submit the request.5. Next, access the Certificate Manager Agent Services interface.6. Click List Requests.
