In this demonstration, you'll see how to configure SCA for a key archival.
So first on along the Savannah in Server Manager, I'll click tools and then click Certification Authority
in the Certification Authority Council.
I'll expand the eight agency node on the right, click the certificates templates folder and then click
Manage.
Then in the details pane, I'll right click the key recovery agent certificate and then click properties.
In the key recovery agent properties dialog dialog box.
I'll click the issuance requirements tab and clear the certificate manager approval checkbox along.
Click the security tap.
In the demo, I'll notice that the main admin centre to process admins groups are the owner groups that
have the enroll permission.
And then click.
Okay, I will close the certificate templates council until the Certification Authority Council.
I will right click certificate templates and appoint to a new and then click certificate template to
issue in the Enable Certificate Template Style Books.
I'll click the key recovery agent template and then click okay.
Well click start and then click the PowerShell Windows PowerShell icon and other Windows PowerShell
coming from tile type imam Sidoti XP and Press Enter another the console one I'll click file and then
click add to remove snipping add on to the add or remove snip in dialog box.
I'll click certificates and then click out and in the certificate snap in dialog box I will select.
My user account and click finish and then click.
Okay.
Then I'll expand cert current user node and to right click personal and point to all tasks and then
click request new certificate in the Certificate Enrollment Resort only.
Before you begin Page, I'll click next and on the Select Certificate Enrollment Policy Page, I'll
click next learn on the request certificate page, I'll select the key recovery agent, check books
and click Enroll and then click Finish.
I'll refresh the console alone to view the key.
Our A and the personal store.
I can scroll across the certificate properties and verify the certificate template with the intended
purpose.
Key Recovery Agent is present oh well closed console one result save and change those and return to
the certification authority.
Counsel has the right to click a date and see how then click properties in the added and see Properties
Dialog box.
I'll click the Recovery Agent Step and then select archive.
The Key and the key A Recovery Agent Certificates.
I'll click Add.
In the Q Recovery Agent Selection Dialog Books, I'll click more choices and click the certificate.
The key k a purpose.
It most likely will be the last on the list issued to administrator.
Then I'll click.
Okay.
Once prompted to restart the see, I'll click.
Yes.