Using the CLM 2007 Web Site

  • Article

Microsoft® Identity Lifecycle Manager "2" Certificate Management Service (ILM CMS) is an identity-assurance management system that maximizes the trust and flexibility associated with digital certificates and smart cards. A server that runs this software is known as a CLM server.

ILM CMS provides a Web-based user interface (CLM Web site) that users, administrators, and certificate managers use to accomplish routine tasks. The following topics describe the components of the CLM Web site and their related tasks:

  • Using the Home Page of the CLM Web Site

  • Using the Task Pane on the CLM Web Site

Using the Home Page of the CLM Web Site

The home page of the CLM Web site is the starting point for all Web-based administrative tasks in ILM CMS. After you have installed ILM CMS, you can open Microsoft Internet Explorer®, and then log on to the server that is running ILM CMS to view the home page of the CLM Web site. The following screenshot shows the home page of the CLM Web site.

0aab3065-aa72-444f-b2a6-8620e9b1de7c

Note

To return to the home page at any time, click the Microsoft Certificate Lifecycle Manager 2007 logo on the title bar.

As you can see, the home page has a title bar, a task pane, and links.

Title bar

The title bar on the home page displays the title and subtitles of the CLM Web site. The title bar persists on subsequent pages. You use the title bar to do the following tasks:

  • To return to the home page at any time, you click the Microsoft Certificate Lifecycle Manager 2007 logo at the top left of the page.

  • To open Web-based Help for ILM CMS, you click Help at the top right of the page.

Task pane

The task pane on the home page of the CLM Web site has the following sections:

  • CommonTasks

  • ManageUsersandCertificates

  • ManageUserSmartCards

  • Requests

  • Administration

  • Reports

Note

You must log on as an administrator for ILM CMS to access and create reports.

The tasks used most frequently are in Common Tasks.

Note

You can rest your pointer on any Web page link to display information about the tasks that you can perform if you click the link.

Each section of the task pane is discussed in detail in later topics.

The links on the home page are specific to the current user and tasks relevant to the active page. The links persist on subsequent pages. On the home page, you can use the links to select a view for a certificate manager or a user. (A user is also known as a certificate subscriber.) The view for a user is named Manage My Info, and the view for a manger is named Manager operations.

In the view for a certificate manager, you can sort certificate management requests by type. On subsequent pages, you can use these links to sort other types of data and to go to relevant subpages.

Note

If you log on as an administrator for ILM CMS, the Reports section of the home page is available. In addition, administrative tasks, including editing profile templates, are available in the CLM Web site. An administrator is a certificate manager who has been assigned at least one ILM CMS administrative permission.

Selecting a view

The views that you can select from the home page of the CLM Web site depend on whether you are logged on as a user, certificate manager, or administrator. On the home page, the links are available only for a certificate manager, not for a user. If you log on as a certificate manager, the home page defaults to the certificate manager view.

To use the view for a user when you are logged on as a certificate manager or administrator

  1. Log on to ILM CMS as a certificate manager or administrator.

  2. On the Home page, in Select a view , click Manage My Info.

  3. To return to the certificate manager or administrator view of the home page, in Select a view, click Manager operations.

Making a request

A request is a certificate management workflow item that a user must approve, complete, or run before that user can receive a certificate. ILM CMS categorizes requests by status, for example, pending, approved, or executing.

In the CLM Web site, each request status is an active link. Clicking the link opens a request page where you can find additional information about the request.

Note

ILM CMS displays only requests appropriate to the permissions of the user who is logged on.

Using the Task Pane on the CLM Web Site

The following topics describe how to use the task pane on the CLM Web site:

  • Common Tasks section

  • Manage Users and Certificates section

  • Manage User Smart Cards section

  • Requests section

  • Administration section

  • Reports section

Common Tasks section

As a certificate manager, you can use the Common Tasks section to perform the most common daily tasks: enroll a user for a new certificate or smart card, and view requests that you must approve or complete.

Enroll a user for a new certificate or smart card

To enroll a user for a new certificate or smart card, you search Active Directory® directory service for the user, and then select the appropriate profile template.

Search for a user

The following table shows the default Active Directory search criteria that you can use to search for a user.

Search criteria Description

Location

Finds a user's domain.

If there is only one domain, the box is empty.

Name

Finds a user's name.

Only the first part of the user's name is required. For example, typing Brian locates both Brian Smith and Brian Johnson.

Email address

Finds a user's e-mail address.

Only the first part of the user's name is required. For example, typing Brian locates both briansmith@contoso.com and brianjohnson@contoso.com.

Advanced

Finds a user by using any valid Active Directory criteria.

An administrator must edit the Web.config file to configure the available custom Active Directory criteria.

To search for a user by using default Active Directory search criteria

  1. Log on to ILM CMS as a certificate manager or administrator.

  2. On the Home page, in Common Tasks, click Enroll a user for a new set of certificates or a smart card.

  3. On the Search for Users page, enter the search criteria based on location, name, or e-mail address, select the columns that you want to use to display the information, and then click Search.

    If you click Search on the Search for Users page without specifying search criteria, ILM CMS displays a list of all available users.

To configure CLM 2007 to use custom Active Directory search criteria

  1. Go to %ProgramFiles%\Microsoft Certificate Lifecycle Manager, right-click Web.config, and then click Edit.

  2. In the Web.config file, in value, type a valid Active Directory attribute for the following line:

    <!-- 
Active Directory attributes that can be used in advanced user search. -->
<add key="CLM.UserSearch.Attributes" value="displayname, name" />

  3. Save the file, and then exit the text editor.

  4. On the home page of the CLM Web site, select the new attribute from Active Directory Search Attributes.

  5. To the right of Active Directory Search Attributes, type a value in the box, and then click Add.

To search for a user by using custom Active Directory criteria

  1. Log on to ILM CMS as a certificate manager or administrator.

  2. On the Home page, in Common Tasks, click Enroll a user for a new set of certificates or a smart card.

  3. On the Search for Users page, enter search criteria based on location, name, e-mail address, or custom Active Directory criteria, select the columns that you want to use to display the information, and then click Search.

Enroll a user

To enroll a user for a certificate, your account must have the CLM Request Enroll extended permission.

To enroll a user for a new certificate or smart card

  1. Log on to ILM CMS as a certificate manager or administrator.

  2. On the Home page, in Common Tasks, click Enroll a user for a new set of certificates or a smart card.

  3. On the Search for Users page, enter the search criteria based on location, name, or e-mail address, select the columns that you want to use to display the information, and then click Search.

  4. On the Search Results page, click the user's name.

  5. To begin the enrollment process, on the Profile Selection: All page, select the appropriate profile template from Profile template, and then click Next.

    Select a template that supports the type of certificate that you are using—a smart card or a software-based certificate.

  6. On the Manager-Initiated Enroll page, in Manager Information, type a descriptive name for the enrollment request, add comments, set the request priority, and then click OK.

    You can set a priority between 0 and 255. The lower the number, the higher the priority. For example, a priority 1 request has a higher priority than a priority 3 request.

View a request

As a certificate manager or administrator, you can view a request that you must approve or complete.

To view a request that you must approve or complete

  1. Log on to ILM CMS as a certificate manager or administrator.

  2. On the Home page, in Common Tasks, click either View requests that need approvals or View requests that need completion.

Note

You can view requests that are not awaiting action in the Requests section or in Request in the list of links on the CLM Web site. Requests that are not awaiting action are those in a pending, approved, or executing state.

Manage Users and Certificates section

As a certificate manager, you can use the Manage Users and Certificates section of the home page on the CLM Web site to search for a user, certificate, or certificate revocation list.

Search for a user

The following table shows the search criteria that you can use to find a user.

Search criteria Description

Location

Finds a user's domain.

If the user has only one domain, the list box is empty.

Name

Finds a user's name.

ILM CMS requires only the first part of the user's name. For example, typing Brian locates both Brian Smith and Brian Johnson.

Email Address

Finds a user's e-mail address.

ILM CMS requires only the first part of the user's name. For example, typing Brian locates both briansmith@contoso.com and brianjohnson@contoso.com.

Advanced

Finds a user by using any valid Active Directory criteria.

An administrator must edit the Web.config file to configure the available custom Active Directory criteria.

To search for a user by using default Active Directory criteria

  1. Log on to ILM CMS as a certificate manager or administrator.

  2. On the Home page, in Manage Users And Certificates, click Find a user to view or manage their information.

  3. On the Search for Users page, enter search criteria based on location, name, or e-mail address, select the columns that you want to use to display the information, and then click Search.

  4. To view a user's information, click that user's name.

In addition to specifying the default search criteria, as an administrator, you can also specify custom Active Directory search criteria.

To configure CLM 2007 for custom Active Directory search criteria

  1. Go to %ProgramFiles%\Microsoft Certificate Lifecycle Manager, right-click Web.config, and then select Edit.

  2. In the Web.config file, in value, type a valid Active Directory attribute for the following line:

    <!-- 
Active Directory attributes that can be used in advanced user search. -->
<add key="CLM.UserSearch.Attributes" value="displayname, name" />

  3. Save the file, and then exit the text editor.

  4. On the Home page, select the new attribute from Active Directory Search Attributes.

  5. To the right of Active Directory Search Attributes, type a value in the box, and then click Add.

To search for a user by using custom Active Directory search criteria

  1. Log on to ILM CMS as a certificate manager or administrator.

  2. On the Home page, in Manage Users And Certificates, click Find a user to view or manage their information.

  3. On the Search for Users page, enter search criteria based on location, name, e-mail address, or custom Active Directory criteria, select the columns that you want to use to display the information, and then click Search.

  4. To view a user's information, click that user's name.

Search for a certificate

You can search for certificates that meet specified search criteria. On the Search for a Certificate page, the search criteria are grouped into the following categories:

  • Templates

  • Certificate Criteria

  • User Criteria

Template search criteria

In Templates, you can search for a certificate by using its underlying profile template or certificate template. The following table shows the search criteria that you can use to find a certificate.

Search criteria Description

Profile template

Finds a certificate that is applied to a specific profile template.

Certificate template

Finds a certificate that is applied to a specific certificate template.
Certificate search criteria

In Certificate Criteria, you can search for a certificate that matches your search criteria. The following table shows the search criteria that you can use to find a certificate.

Search criteria Description

Common name

Finds certificates that have a matching common name.

Certificate serial number

Finds certificates that have specified serial numbers.

Certificate type

Finds certificates that have one of the following types: Native, External, or Any.

Revoked

Finds certificates that ILM CMS revoked before their expiration dates. Available values are Any, Yes, or No.

Expired

Finds certificates that are expired. Available values are Any, Yes, or No.

Issued date range

Finds certificates that ILM CMS issued between the specified dates by using the Issued date from and the Issued date to lists.

Expiry dates

Finds certificates that have an expiry date between the specified dates by using the Expiry date from and the Expiry date to lists.
User search criteria

In User Criteria, you can search for certificates that are issued to a specific user by using logon name or e-mail address. The following table shows the search criteria that you can use to find a certificate.

Search criteria Description

Logon name

Finds certificates that ILM CMS issued to a user based on that user's logon name. To search for the user's name in Active Directory, type the name in the format domain\username, or click Look Up.

E-mail

Finds certificates issued to a user by using the user's e-mail address.

When you use the Search for a Certificate page, keep the following guidelines in mind:

  • Enter more criteria to narrow your search.

  • Enter fewer criteria to broaden your search.

  • Enter dates according to the format specified in the Locale settings for the CLM server.

  • To widen the results columns, drag the pointer to move the column divider.

  • If an item in a results column is too wide to view completely, rest the pointer on the item to see the entire item.

Note

Search results appear in a tabular format.

To search for a certificate

  1. Log on to ILM CMS as a certificate manager or administrator.

  2. On the Home page, in Manage Users And Certificates, click Find a certificate.

  3. On the Search for a Certificate page, enter the search criteria, and then click Search.

  4. To view certificate information, click the certificate that you want.

  5. Optionally, format your search results by selecting the columns that you want included in your search results.

Search for a certificate revocation list

You can search for a certificate revocation list (CRL) for a specific certification authority (CA).

To search for a CRL

  1. Log on to ILM CMS as a certificate manager or administrator.

  2. On the Home page, in Manage Users And Certificates, click Find a certificate revocation list.

  3. On the Search for Certificate Revocations page, in Certificate Authority, select the appropriate CA.

  4. In Certificate Revocation List, select the appropriate CRL, and then click Search.

    You can specify either the base or delta CRL.

Manage User Smart Cards section

You can use the Manage User Smart Cards section on the home page of the CLM Web site to find or unblock a smart card, and to view its details.

Find or unblock a smart card

When you click Find a smart card or Unblock a user’s smart card, the Search for Smart Cards page opens. You use that page to enter search criteria for a specific smart card.

The following table shows the sections of the Search for Smart Cards page.

Section Description

User Criteria

Finds the name of the user who was issued the smart card.

To search for the user's name in Active Directory, type the name in the format domain\username or click Look Up.

Smart Card Criteria

Finds smart cards based on their attributes.

The following table shows the search criteria that you can use to find or unblock a smart card.

Search criteria Description

Profile template

Finds smart cards that have a specified profile template.

Provider

Finds smart cards that have a specified provider.

Serial number

Finds smart cards that have specified serial numbers.

Smart card state

Finds smart cards that have one of the following states: New, Assigned, Active, Disabled, Suspended, or Retired.

Revoked

Finds smart cards that ILM CMS revoked before their expiration dates. Available values are Any, Yes, or No.

Expired

Finds smart cards that have expired. Available values are Any, Yes, or No.

Assigned dates

Finds smart cards that ILM CMS issued between the specified dates.

Reused cards

Finds only the current assignments of reused cards, rather than their entire reuse histories.

To search for a smart card or unblock a smart card by using user criteria

  1. Log on to ILM CMS as a certificate manager or administrator.

  2. On the Home page, in Manage User Smart Cards, click Unblock a user's smart card or click Find a smart card.

  3. On the Search for Smart Cards page, type the username for a specific user or click Lookup to search for users or groups.

    You must use the DomainName\UserName format for the user's name.

  4. On the Search for Smart Cards page, under Search Results, click the serial number for the appropriate smart card.

  5. On the Review Details of a Smart Card Profile page, review the details of the smart card.

  6. Under Smart Card Operations, click the available operations to perform specific operations on the smart card, including Retire, Enroll, and Unblock.

    ILM CMS displays only the operations that you can perform on a specific smart card under Smart Card Operations. For example, if a smart card is not blocked, then ILM CMS displays Unblock.

To search for a smart card or unblock a smart card

  1. Log on to ILM CMS as a certificate manager or administrator.

  2. On the Home page, in Manage User Smart Cards, click Unblock a user's smart card or click Find a smart card.

  3. On the Search for Smart Cards page, in Smart Card Criteria, enter or select smart card criteria, and then click Search.

  4. On the Review Details of a Smart Card Profile page, review the details of the smart card.

  5. Under Smart Card Operations, click the available operations to perform specific operations on the smart card, including Retire, Enroll, and Unblock.

    ILM CMS displays only the operations that you can perform on a specific smart card under Smart Card Operations. For example, if a smart card is not blocked, then ILM CMS displays Unblock.

View details of the smart card in the smart card reader

By using a smart card reader, you can view the details for a smart card without using Find a smart card.

To view details for a smart card by using the smart card reader

  1. Insert the smart card into the smart card reader.

  2. Click View details of the smart card currently in the reader.

Requests section

You can use the Requests section on the home page of the CLM Web site to approve pending requests, view the status of a pending request, or distribute passwords for one-time use to complete a request.

A request is created when a template requires approval before a certificate is issued. In the request queue, a certificate manager who has permissions in Active Directory to manage a user sees requests that users have submitted to the CA.

In Requests, a certificate manager can complete the following tasks:

  • Find a request

  • Browse completed requests

  • Distribute one-time passwords for a request

Find a request

When you click Find a request on the home page of the CLM Web site, the Search for Requests page opens. On this page, you can search for a specific request based on type, status, date, priority, user name, or user group.

The following table shows the search criteria you can use to find a request.

Search criteria Description

Request criteria

Request criteria are based on the following properties:

  • Request type: Finds requests that have a specified request type. The available values are All, Enroll, Recover, Renew, Disable, Unblock, Offline Unblock, Duplicate, Retire, Recover on Behalf, Suspend or Reinstate, Online Update, Temporary Card Enroll, Temporary Card Retire, or Temporary Card Disable.

  • Request status: Finds requests that have a specified current status. The available values are All, Approved, Denied, Completed, Failed, Pending, Cancelled, and Executing.

  • Request initiation: Finds requests that ILM CMS initiated between the specified dates.

  • Request priority: Finds requests that have a specified priority, where 0 (zero) is the highest priority. The larger the number, the lower the priority.

User name

Finds requests initiated by a specified user.

User group

Finds requests initiated by a member of a specified group.

To find a request

  1. Log on to ILM CMS as a certificate manager or administrator.

  2. On the Home page, click Find a request.

  3. On the Search for Requests page, provide criteria under Search for Requests or provide criteria under Search Criteria for Active Directory, and then click Search.

The following table shows the sections of the Request Details page for the certificate request.

Section Description

General

Shows the general details of the request.

Registration Data

Shows any registration data that is collected.

Advanced

Shows additional information that is specific to this request.

History

Shows a detailed history of the request.

Depending on the actions you can take, you see the following buttons:

  • If you can approve the request, you see Approve and Reject buttons.

  • If you can change the priority of the request, you see a Change request priority button.

  • If you can abandon the request, you see an Abandon button.

  • If you can redistribute the one-time passwords, you see a Distribute button.

Browse completed requests

When you click Browse completed requests, ILM CMS lists all completed certificate requests that are assigned to you.

To browse completed requests

  1. Log on to ILM CMS as a certificate manager or administrator.

  2. On the Home page, click Find a request.

  3. On the Search for Requests page, provide criteria under Search for Requests or provide criteria under Search Criteria for Active Directory, and then click Search.

  4. On the Request Details page, click the Status link for the request.

Distribute one-time passwords for a request

When you click Distribute one-time-passwords for a request on the home page of the CLM Web site, the Search for Requests page opens. From this page, you can search for a request. For information on the search criteria you can use, see Find a request.

If you can redistribute the one-time passwords, you can click the Distribute button.

Administration section

You can use the Administration section of the home page of the CLM Web site to view and modify configuration settings for profile templates, and to set up profile workflows.

When you click Manage profile templates on the home page of the CLM Web site, the Profile Template Management page opens. This page lists all configured profile templates and provides options to view, change, or copy profile templates.

To view a profile template and change its configuration settings

  1. Log on to ILM CMS as an administrator.

  2. On the Home page, click Manage profile templates.

  3. On the Profile Template Management page, click the name of the appropriate profile template name.

  4. On the Edit Profile Template page, review the settings for the profile template, and then make any changes you want.

To copy a profile template

  1. Log on to ILM CMS as an administrator.

  2. On the Home page, click Manage profile templates.

  3. On the Profile Template Management page, select the check box next to the appropriate profile template name, and then click Copy a selected profile template.

The Profile Template Management page lists the following sample templates that you can use to create new profiles:

  • CLM Sample Profile Template (for software-based certificates)

  • CLM Sample Smart Card Logon Profile Template (for smart cards)

For more information about configuring and managing CLM profile templates, see Configuring Profile Templates (https://go.microsoft.com/fwlink/?LinkID=88441).

Reports section

You can use the Reports section of the home page of the CLM Web site to create reports on requests, certificates, profiles, or smart cards.

Note

You must log on as an administrator for ILM CMS to access the Reports section of the home page. An administrator is a certificate manager who has at least one ILM CMS administrative permission assigned.

Each report you request has the following sections:

  • Search Criteria

    In this section, the search criteria available can vary based on the report. Typically, they include date fields, template selections, serial numbers, or request fields that you can use to narrow your search.

  • Report Format

    In this section, you can create all reports as comma-separated format files, and then save them in different locations.

The following table shows the reports that are available in the Reports section.

Report Description

Smart card inventory report

Lists all smart card deployments that ILM CMS managed between the specified dates.

Request summary report

Lists all requests that you submitted between the specified dates.

Certificate summary usage report

Lists all certificates that have been deployed.

Certificate summary expiry report

Lists all certificates with an expiry date on or before the specified date.

Smart card report

Lists all smart cards that match your search criteria.

Request report

Lists all requests that have your search criteria.

Certificate template settings report

Lists details of specified certificate templates.

Profile template settings report

Lists details of specified profile templates.

Certificate template usage report

Lists details of all certificates that you issued between the specified dates.

Certificate revocation list report

Lists all revoked certificates and the reasons for their revocation.

Smart card history report

Lists the history of a specific smart card.

Smart card inventory report

The smart card inventory report lists all smart card deployments that ILM CMS managed between the specified dates. The following table shows the search criteria that you can use to create a smart card inventory report.

Search criteria Description

Smart card types

Finds the smart cards by using the smart card type, including the folllowing types:

All, Primary, Duplicate, Reused, Temporary, Recovered, and Obsolete. To select multiple types of smart cards, you press SHIFT + CTRL, and then click additional smart card types.

Assigned date range

Finds smart cards that ILM CMS assigned between the specified dates by using the Assigned date from and the Assigned date to lists.

Serial number

Finds a smart card by using its serial number.

To create a smart card inventory report

  1. Log on to ILM CMS as an administrator.

  2. On the Home page, in Reports, click More, and then click Smart card inventory report.

  3. On the Smart Card Inventory Report page, in Search Criteria, specify some or all of the following search criteria:

    • In Smart card type, select a smart card type.

    • In Assigned date from and Assigned date to, type a date range.

    • In Serial number, type a smart card serial number.

  4. In Report Format, select the Export to a comma-separated file check box to export the output to a comma-separated format file.

  5. Click Get Report.

    The smart card inventory report is created as a pop-up. To view the report correctly, you must enable pop-ups for the CLM Web site.

  6. On the Smart Card Inventory Report page, under Actions, click Export to download the file, click Print to print the report, or click Close to close the report.

Request summary report

The request summary report lists all requests that users submitted between the specified dates. The following table shows the search criteria that you can use to create a request summary report.

Search criteria Description

Submitted date range

Finds requests that a user submitted between the specified dates by using the Submitted date from and Submitted date to lists.

To create a request summary report

  1. Log on to ILM CMS as an administrator.

  2. On the Home page, in Reports, click More, and then click Request summary report.

  3. On the Request Summary Report page, in Search Criteria, specify a date range for the report.

  4. In Report Format, select the Export to a comma-separated file check box to export the output to a comma-separated format file.

  5. Click Get Report.

    The request summary report appears as a pop-up. To view the report correctly, you must enable pop-ups for the CLM Web site.

  6. On the Request Summary Report page, under Actions, click Export to download the file, click Print to print the report, or click Close to close the report.

Certificate usage summary report

The certificate usage summary report summarizes all certificates that you deployed. The report sorts certificates by certificate template and profile template. The following table shows the search criteria that you can use to create a certificate usage summary report.

Search criteria Description

Submitted date range

Finds certificates that users submitted between the specified dates by using the Submitted date from and the Submitted date to lists.

Revoked

Finds certificates based on whether they are revoked. The available values are Any, Yes, and No.

Expired

Finds certificates based on whether they are expired. The available values are Any, Yes, and No.

To create a certificate usage summary report

  1. Log on to ILM CMS as an administrator.

  2. On the Home page, in Reports, click More, and then click Certificate usage summary report.

  3. On the Certificate Usage Summary Report page, in Search Criteria, specify some or all of the following search criteria:

    • Specify a date range in Submitted date from and Submitted date to.

    • Select a revocation status from the Revoked list.

    • Select an expiry status from the Expired list.

  4. In Report Format, select the Export to a comma-separated file check box to export the output to a comma-separated format file.

  5. Click Get Report.

    The certificate usage summary report appears as a pop-up. To view the report correctly, you must enable pop-ups for the CLM Web site.

  6. On the Certificate Usage Summary Report page, under Actions, click Export to download the file, click Print to print the report, or click Close to close the report.

Certificate expiry summary report

The certificate expiry summary report lists all certificates with an expiry date on or before the specified date. Typically, you use this report to track issued certificates that will expire in the near future. When you request the report, the Expiry Date value will default to the current system date. You must change that date to the end date for your search. The following table shows the search criteria that you can use to create a certificate expiry summary report.

Search criteria Description

Expiry Date

Finds certificates by using their expiry date.

To create a certificate expiry summary report

  1. Log on to ILM CMS as an administrator.

  2. On the Home page, in Reports, click More, and then click Certificate expiry summary report.

  3. On the Certificate Expiry Summary Report page, in Search Criteria, enter a certificate expiry date.

  4. In Report Format, select the Export to a comma-separated file check box to export the output to a comma-separated format file.

  5. Click Get Report.

    The certificate expiry summary report appears as a pop-up. To view the report correctly, you must enable pop-ups for the CLM Web site.

  6. On the Certificate Expiry Summary Report page, under Actions, click Export to download the file, click Print to print the report, or click Close to close the report.

Smart card report

The smart card report lists all smart cards that match your search criteria. The following table shows the search criteria that you can use to create a smart card report.

Search criteria Description

Assigned date range

Finds smart cards that ILM CMS assigned between the specified dates by using the Assigned date from and the Assigned date to lists.

Subject

Finds smart cards that have a specified subject.

Serial number

Finds smart cards by using their serial numbers.

To create a smart card report

  1. Log on to ILM CMS as an administrator.

  2. On the Home page, in Reports, click More, and then click Smart card report.

  3. On the Smart Card Report page, in Search Criteria, specify some or all of the following search criteria:

    • Specify a date range in Assigned date from and Assigned date to.

    • Under Subject, specify a smart card subject.

    • Under Serial Number, type the smart card's serial number.

  4. In Report Format, select the Export to a comma-separated file check box to export the output to a comma-separated format file.

  5. Click Get Report.

    The smart card report appears as a pop-up. To view the report correctly, you must enable pop-ups for the CLM Web site.

  6. On the Smart Card Report page, under Actions, click Export to download the file, click Print to print the report, or click Close to close the report.

Request report

The request report lists all requests that have your search criteria. The following table shows the search criteria that you can use to create a request report.

Search criteria Description

Request type

Finds the following request types: All, Enroll, Recover, Renew, Disable, Unblock, Offline Unblock, Duplicate, Retire, Recover on Behalf, Suspend or Reinstate, Online Update, Temporary Card Enroll, Temporary Card Retire, and Temporary Card Disable.

Request status

Finds requests by using their current status. The available values are (All), Approved, Denied, Completed, Failed, Pending, Cancelled, and Executing.

Submitted date range

Finds requests that ILM CMS initiated between the specified dates by using the Submitted date from and the Submitted date to lists.

To create a request report

  1. Log on to ILM CMS as an administrator.

  2. On the Home page, in Reports, click More, and then click Request report.

  3. On the Request Report page, in Search Criteria, specify some or all of the following search criteria:

    • Select a request type from the Request type list.

    • Select a request status from the Request status list

    • Specify a date range in Submitted date from and Submitted date to.

  4. In Report Format, select the Export to a comma-separated file check box to export the output to a comma-separated format file.

  5. Click Get Report.

    The request report appears as a pop-up. To view the report correctly, you must enable pop-ups for the CLM Web site.

  6. On the Request Report page, under Actions, click Export to download the file, click Print to print the report, or click Close to close the report.

Certificate template settings report

The certificate template settings report lists details of specified certificate templates. The following table shows the search criteria that you can use to create a certificate template settings report.

Search criteria Description

Certificate template

Finds a specific certificate template.

To create a certificate template settings report

  1. Log on to ILM CMS as an administrator.

  2. On the Home page, in Reports, click More, and then click Certificate template settings report.

  3. On the Certificate Template Settings Report page, in Search Criteria, select a certificate template from the Certificate template list.

  4. In Report Format, select the Export to a comma-separated file check box to export the output to a comma-separated format file.

  5. Click Get Report.

    The certificate template settings report appears as a pop-up. To view the report correctly, you must enable pop-ups for the CLM Web site.

  6. On the Certificate Template Settings Report page, under Actions, click Export to download the file, click Print to print the report, or click Close to close the report.

Profile template settings report

The profile template settings report lists details of specified profile templates. To create the report, you select an available profile template. The following table shows the search criteria that you can use to create a profile template settings report.

Search criteria Description

Profile template

Finds a specific profile template.

To create a profile template settings report

  1. Log on to ILM CMS as an administrator.

  2. On the Home page, in Reports, click More, and then click Profile template settings report.

  3. On the Profile Template Settings Report page, in Search Criteria, select a certificate template from the Profile template list.

  4. In Report Format, select the Export to a comma-separated file check box to export the output to a comma-separated format file.

  5. Click Get Report.

    The profile template settings report appears as a pop-up. To view the report correctly, you must enable pop-ups for the CLM Web site.

  6. On the Profile Template Settings Report page, under Actions, click Export to download the file, click Print to print the report, or click Close to close the report.

Certificate template usage report

The certificate template usage report lists details of all certificates issued between the specified dates. The following table shows the search criteria that you can use to create a certificate template usage report.

Search criteria Description

Certificate authority

Finds all CAs in the forest or finds a specific CA.

Certificate template name

Finds a specific certificate template name.

Profile template name

Finds a specific profile template name.

Issued date

Finds certificates that ILM CMS issued between the specified dates.

Expired date

Finds certificates that will expire between the specified dates.

Subject

Finds a specific certificate subject name.

Certificate serial number

Finds a specific certificate serial number.

Email

Finds a specific e-mail address.

To create a certificate template usage report

  1. Log on to ILM CMS as an administrator.

  2. On the Home page, in Reports, click More, and then click Certificate template usage report.

  3. On the Certificate Template Usage Report page, in Search Criteria, specify some or all of the following search criteria:

    • Select a certification authority from the Certificate authority list.

    • Select the name for a specific certificate template from the Certificate template name list.

    • Select the name for a specific profile template from the Profile template name list.

    • Specify a date range in Issued date from and Issued date to.

    • Specify a date range in Expired date from and Expired date to.

    • In Subject, type the certificate template's subject or subject keywords.

    • In Certificate serial number, type a certificate serial number.

    • In E-mail, type a user's e-mail address.

  4. In Report Format, select the Export to a comma-separated file check box to export the output to a comma-separated format file.

  5. Click Get Report.

    The certificate template usage report appears as a pop-up. To view the report correctly, you must enable pop-ups for the CLM Web site.

  6. On the Certificate Template Usage Report page, under Actions, click Export to download the file, click Print to print the report, or click Close to close the report.

Certificate revocation list report

The certificate revocation list report lists all revoked certificates and the reasons for their revocation. The following table shows the search criteria that you can use to create a certificate revocation list report.

Search criteria Description

Certificate authority

Designates a specific CA in the forest.

Certificate revocation list

Requests either the current Base CRL or Delta CRL from the selected CA.

To create a certificate revocation list report

  1. Log on to ILM CMS as an administrator.

  2. On the Home page, in Reports, click More, and then click Certificate revocation list report.

  3. On the Certificate Revocation List Report page, in Search Criteria, select a CA from the Certificate authority list.

  4. Select a CRL from Certificate revocation list.

  5. In Report Format, select the Export to a comma-separated file check box to export the output to a comma-separated format file.

  6. Click Get Report.

    The certificate revocation list report appears as a pop-up. To view the report correctly, you must enable pop-ups for the CLM Web site.

  7. On the Certificate Revocation List Report page, under Actions, click Export to download the file, click Print to print the report, or click Close to close the report.

Smart card history report

The smart card history report lists the history of a specified smart card. The following table shows the search criteria that you can use to create a smart card history report.

Search criteria Description

Vendor

Finds specific smart card vendors. Type part or the entire vendor name. You can type both uppercase and lowercase letters.

Serial number

Finds smart cards with numbers that begin with the partial serial number you type.

To create a smart card history report

  1. Log on to ILM CMS as an administrator.

  2. On the Home page, in Reports, click More, and then click Smart card history report.

  3. On the Smart Card History Report page, in Search Criteria, specify one or both of the following search criteria:

    • In Vendor, type a vendor name.

    • In Serial number, type the vendor's serial number.

  4. In Report Format, select the Export to a comma-separated file check box to export the output to a comma-separated format file.

  5. Click Get Report.

    The smart card history report appears as a pop-up. To view the report correctly, you must enable pop-ups for the CLM Web site.

  6. On the Smart Card History Report page, under Actions, click Export to download the file, click Print to print the report, or click Close to close the report.