Managing persons

Edit a person

  1. Navigate to Persons.

  2. Select the person you want to edit, and click Edit.

  3. Update the person’s personal details.

    1. Click the Edit icon in the top right of the Edit Person Details dialog.

    2. Update the Edit Person Details fields based on the information provided in the following table.

      Field Description

      Organization

      The organization to which the person belongs.

      Department

      The department to which the person belongs.

      Domain

      The domain the person is associated with. Only domains delegated to the selected organization and department are available.

      First Name

      The person’s first name.

      Middle Name

      The person’s middle name.

      Last Name

      The person’s last name.

      Phone Number

      The person’s contact phone number.

      Email Address

      The person’s email address used for notifications and certificate issuance.

    3. Click Next.

  4. Update the Details tab fields based on the information provided in the following table.

    Field Description

    Common Name

    The common name (CN) to be included in the person’s certificates. For client certificates, this is typically the person’s full legal name.

    EPPN

    A unique identifier for individuals within education and research institutions, often resembling an email address.

    Principal Name

    The user principal name (UPN) of the person that may be included in the SAN of issued client certificates.

    Validation Type

    The level of validation used to verify the person’s identity.

    The possible values are:

    • Standard — Supports the issuance of standard client certificates.

    • High (Identity Validated for S/MIME Sponsored Enrollment) — Supports the issuance of S/MIME Sponsor-Validated certificates. The person must be validated by a sponsor before the certificate is issued.

    Alternative Emails

    Alternative email addresses that may be included in the SAN of issued client certificates.

    Secret

    The secret ID for use when accessing self-enrollment forms.

  5. Click Save.

Send a self-enrollment invitation

This requires an appropriately configured enrollment form. For more information, see Understanding enrollment forms.
  1. Navigate to Persons.

  2. Select the person you want to invite, and click Edit.

  3. On the Enrollment Invitation tab, click the Add invitation icon.

  4. Specify the enrollment endpoint and associated account that the person will access.

  5. Click Send.

Revoke a person’s certificate

  1. Navigate to Persons.

  2. Select the person whose certificate you want to revoke, and click Certificates.

  3. Select the certificate you want to revoke, and click Revoke.

  4. Select a reason for revocation.

  5. Provide a message with additional information about the revocation.

  6. Click Revoke.

Delete a person

  1. Navigate to Persons.

  2. Select the person you want to delete, and click Delete.

  3. Click Delete.