Active Administrator 8.7 - User Guide

Adding computers

Adding computers

To manage certificates on a computer, you must first add the computer. Only the computers listed in the Available computers list are monitored for certificate management.

To add computers to view certificates

1	Select Certificate | Certificate Management.

2	Click Computers.

3	Click Add to add new computers to the list.

4	To populate the Available computers list, choose between adding selected computers, loading computers from selected OUs or loading computers from selected groups. You can use a combination of these options to populate the list of computers.

To add selected computers

a	Select Select Computers.

b	Type the fully qualified domain name (FQDN) of each computer you want to add, separated by semi colons.

-OR-

Browse and select one or more computers.

c	Click Add to add the computers to the list of Available computers.

d	Repeat as necessary to add the computers you need.

To add computers in OUs

a	Select Select Organizational Units.

b	Type the name of each OU, separated by semicolons.

-OR-

Browse and select one or more OUs.

NOTE: The OUs you select are added to the list of monitored OUs. You can add or remove OUs from the list of Monitored Objects once you complete this task. See Updating the list of certificates. NOTE: To reload the list of objects, click Refresh. All selections are cleared and any newly added OUs appear in the list.

c	By default, nested OUs are included. To exclude nested OUs, clear the check box.

d	By default, the OUs you selected are monitored for computers that are added or removed. To disable monitoring, clear the check box.

NOTE: By default, OUs are monitored every 30 minutes to check for computers that are added or removed. To change the monitoring time, to add or remove OUs from monitoring, or to disable/enable monitoring, see Updating the list of certificates.

e	Click Add to add the computers from the selected OUs to the list of Available Computers.

f	Repeat as necessary to add the computers you need.

To add computers in Groups

a	Select Select Groups.

b	Type the name of each group, separated by semicolons.

-OR-

Browse and select one or more groups.

NOTE: The groups you select are added to the list of Monitored Objects. You can add or remove groups from the list of Monitored Objects once you complete this task. See Updating the list of certificates. NOTE: To reload the list of objects, click Refresh. All selections are cleared and any newly added groups appear in the list.

c	By default, nested groups are included. To exclude nested groups, clear the check box.

d	By default, the groups you selected are monitored for computers that are added or removed. To disable monitoring, clear the check box.

NOTE: By default, groups are monitored every 30 minutes to check for computers that are added or removed. To change the monitoring time, to add or remove groups from monitoring, or to disable/enable monitoring, see Updating the list of certificates.

e	Click Add to add the computers from the selected groups to the list of Available Computers.

f	Repeat as necessary to add the computers you need.

5	To manage the Available computers list, you can filter the list and remove computers you no longer need to monitor.

▪	To filter the list, start typing in the Filter Computers box. The list filters as you type.

▪	To remove selected computers from the list, click Remove.

6	By default, all stores in a selected computer are included. You can exclude selected stores from monitoring.

To exclude selected stores

a	Select a computer.

b	Click Stores.

You can filter the list of stores or use Select all/Clear all to manage the list.

c	Clear the check boxes of the stores to exclude.

d

Click OK.

e	Click Yes to confirm the excluded stores.

7	By default, the Active Administrator® Foundation Service Credentials are used to retrieve certificates from the selected computers. If you want to specify a different account, clear the check box, and enter the username, or browse to select an account, and enter the password.

8

Click OK.

NOTE: Active Administrator validates each computer, in the order they appear in the Available computers list. If you selected several computers and the process is taking too long or you are getting errors, you can cancel the process. Click Cancel in the progress bar, and click Yes to confirm. If you want to repeat the test, click Test.

9	Click Close.

10	To view the certificates, select the computer from the treeview. You can now select to create virtual folders to organize the certificates to ease their management. See Managing certificates.

Excluding stores

Excluding stores

You can exclude selected stores on a specified computer from certificate monitoring.

To exclude stores

1	Select Certificate | Certificate Management.

2	Click Computers.

Filter the list, if necessary. Start typing in the Filter computers box. The list filters as you type.

3	Select a computer.

4	Click Stores.

Filter the list, if necessary. Start typing in the Filter stores box. The list filters as you type.

5	Clear the check boxes of the stores to exclude.

6	Use Select all/Clear all to manage the list.

7

Click OK.

8	Click Yes to confirm the excluded stores.

Removing computers

Removing computers

Removing a computer only removes it from Certificate Management. You can add it back at any time.

To remove computers

1	Select Certificate | Certificate Management.

2	Click Computers.

3	Filter the list, if necessary. Start typing in the Filter computers box. The list filters as you type.

4	Select the computers to remove.

5	Click Remove.

6	Click Close.

Disabling certificate management

Disabling certificate management

You can disable or enable dynamic monitoring of certificates on selected computers. To disable or enable dynamic monitoring of certificate management entirely, see Setting certificate configuration.

If you disable dynamic monitoring of certificates, you can update the Active Administrator® database manually at any time by clicking Sync for a selected managed computer.

To disable certificate management on selected computers

1	Select Certificate | Certificate Management.

2	Click Computers.

3	Select the computers to disable.

4	Click Disable.

5	Click Yes.

The icon next to the computers dims indicating that dynamic monitoring is disabled.

NOTE: You also can disable a selected computer by clicking Edit, clearing the Enabled check box, and clicking OK.

6	Click Close.

The computer remains in the selection list and the last synced display of certificates remains.

▪	To sync the display manually, click Sync.