A user was reissued a smart card after the previous smart card had expired. The user is able
to log into the domain but is now unable to send digitally signed or encrypted email. Which of
the following would the user need to perform?
A.
Remove all previous smart card certificates from the local certificate store.
B.
Publish the new certificates to the global address list.
C.
Make the certificates available to the operating system.
D.
Recover the previous smart card certificates.
A new smart card requires for all its certificates to be published to the global address list.
Each smart card will have a completely UNIQUE certificate issued, with an unique ENUMERATION
So we are not concerned about OLD smart cards or OLD certificates in here.
** A. Remove all previous smart card certificates from the local certificate store.
** This is an administrative task performed to tidy up the local certificate store
** Removing old certificates will do nothing to provide and or register a new certificate to a new smart card
C. Make the certificates available to the operating system.
I do not have to make certificates available to the operating system. I want to use the smartcard to authenticate to the DOMAIN. Only this way the user will be able to send digitally signed or encrypted email.
D. Recover the previous smart card certificates.
Previous / old certificates will do nothing to provide and or register a new certificate to a new smart card
So the only possible answer is B- The certificate was issued but it was not published
B. Publish the new certificates to the global address list.
• CAs can be either private or public, with VeriSign being one of the best known of the public variety.
• Many operating system providers allow their systems to be configured as CA systems. These CA systems can be used to generate internal certificates that are used within a business or in large external settings. The process provides certificates to the users.
• Since the user in Question has been re-issued a smart card, the user must receive a new certificate by the CA to allow the user to send digitally signed email.
• This is achieved by publishing the new certificates to the global address list.
0
0