Processing the remote zone enrollment request (task 3)

This task is the third task in the remote zone enrollment process.

Before you begin

About this task

Perform this task on the TKE workstation that is enrolled in the zone.

Procedure

  1. Install the USB flash memory drive that has the enrollment request file on the TKE workstation.
  2. From the Trusted Key Entry console, click Trusted Key Entry.
  3. Open the Smart Card Utility Program (SCUP).
  4. If necessary, log on to the crypto adapter. You must log on with a profile that has TKEADM, SCTKEADM, or equivalent authority.
  5. Click Crypto Adapter > Enroll Crypto Adapter.
  6. Click Remote.
  7. Click OK. A window opens with a message that asks if the file is available.
  8. Click OK.
  9. Insert the CA smart card in reader 1 and press the OK button.
  10. Enter the PINs when you are prompted. The "open file that contains enrollment request" window opens.
  11. Open the enrollment request file.
    1. Select USB Flash Memory drive.
    2. Select the enrollment request file that was created in task 2.
    3. Click Open.
    A window with the message do you want to enroll this adapter opens.
  12. Click OK. An enrollment certificate chain is created. A window with the message enrollment has been granted opens.
  13. Save the enrollment certificate chain on the USB flash memory drive.
    1. Click USB Flash Memory drive.
    2. Enter a file name. For example, EnrollmentCertForTKExxxx.
    1. Click Save.
  14. Click OK on the informational message.
  15. Click File > Exit and Logoff to close the SCUP application.
  16. Remove the USB flash memory drive and send it to the location of the TKE workstation that is to be enrolled in the zone.

Results

An enrollment certificate was created and saved to the USB flash memory drive. Continue to the next task, Completing the remote zone enrollment (task 4).