Cisco Systems Managing the User Database

44-27
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter44 Configuring Digital Certificates
Managing the User Database
What to Do Next
See the “Managing the User Database” section on page 44-27.
Managing the User Database
The local CA user database includes user identification information and user status (enrolled, allowed,
revoked, and so on). In the Manage User Database pane, you can perform the following tasks:
•Add a user to the local CA database.
•Change existing user identification information.
•Remove a user from the local CA database.
•Enroll a user.
•Update CRLs.
•E-mail OTPs to a user.
•View or regenerate (replace) an OTP.
This section includes the following topics:
•Adding a Local CA User, page44-27
•Sending an Initial OTP or Replacing OTPs, page44-28
•Editing a Local CA User, page44-28
•Deleting a Local CA User, page44-29
•Allowing User Enrollment, page44-29
•Viewing or Regenerating an OTP, page 44-29
Adding a Local CA User
To add a local CA user, perform the following steps:
Step1 To enter a new user into the local CA database, click Add to display the Add User dialog box.
Step2 Enter a valid username.
Step3 Enter an existing valid e-mail address.
Step4 Enter the subject (DN string). Alternatively, click Select to display the Certificate Subject DN dialog
box.
Step5 Choose one or more DN attributes that you want to add from the drop-down list, enter a value, and then
click Add. Available X.500 attributes for the Certificate Subject DN are the following:
•Common Name (CN)
•Department (OU)
•Company Name (O)
•Country (C)
•State/Province (ST)
•Location (L)