<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<br>
On 8/3/11 12:38 PM, Adam Young wrote:<br>
<blockquote class=" cite" id="mid_4E397995_90403_redhat_com"
cite="mid:4E397995.90403@redhat.com" type="cite"> I think what you
are interested in is the Data Recovery Manager (DRM...hey, we had
the acronym first, but we also call it Key Recovery ) aspect of
Certificate Server.</blockquote>
<br>
That is awesome. That is exactly what I want.<br>
<br>
Do you have experience with this? If so, does it work if the
certificate requests are being handled by an external entity? We
use a Department of Energy CA located in California, but the users
in our community are from across the US (and international), and
we're looking to improve the process of them acquiring a usable
"identity" in a federated environment. We're using FreeIPA
internally, but if we can link it in to the cert request process and
cert mgmt process (from the user end, not the CA end) that would be
great.<br>
<br>
Ian<br>
</body>
</html>