Enroll a seat

The Enroll seat function assigns an enrollment code to a seat and links it to a certificate profile. Once assigned, the enrollment code can be used to authenticate and issue a certificate against that seat from the linked profile.

You only need to enroll seats for certificate profiles that use the Enrollment Code authentication method. You can enroll a seat when you first create the seat record, or enroll a previously created seat record in DigiCert® Trust Lifecycle Manager.

Aviso

This page describes how to enroll a single seat. To enroll multiple seats at once from a CSV file, see Bulk enroll multiple seats.

Before you begin

You must have at least one certificate profile in your account that's configured with the Enrollment Code authentication method.
If you will create and enroll the seat in one step, decide how to identify the seat, such as an email address, username, or serial number. The identifier is used to manage the seat and must be unique within each business unit and across other seats of the same type.
When enrolling a single seat, the system automatically assigns an enrollment code of the appropriate length, as defined in the Authentication method section of the certificate profile. If you would prefer to specify your own enrollment codes, you must bulk enroll seats instead.

Create and enroll a seat

To create a new seat record and assign it an enrollment code in one step:

From the Trust Lifecycle Manager menu, go to Account > Seats.
Select Create.
Provide values for the seat fields. These vary by seat type.
- Business unit: Select the business unit to create the seat in.
- Seat type: Select the type of seat to create in the business unit.
- Seat ID: Enter a unique identifier for the seat. For example, enter an email address, username, or serial number.
- Seat name: Enter a name to label the seat in Trust Lifecycle Manager. For example, enter the name of a person or device, or a basic description of the business function for the seat.
- Email: (Optional) Assign an email address to the seat, to use for sending notifications if the Seat ID has a value other than an email address.
- Phone: (Optional) For User seats only, assign a phone number to the seat.
Select Create seat to finish and create the seat.
In the popup window that opens, select Enroll.
Complete the Enroll seat form:
1. Select the Profile to use for issuing certificates against the seat. Only profiles that use the Enrollment Code authentication method are available.
2. The certificate properties for the selected profile are displayed. Verify to make sure they look okay.
3. Select Enroll to enroll the seat against that profile.
The system generates an enrollment code and displays it in a popup window. Select the copy icon to copy the enrollment code and store it somewhere safe.
Select Close to close the enrollment code popup.

Enroll an existing seat

To assign an enrollment code to an existing seat record:

From the Trust Lifecycle Manager menu, go to Account > Seats.
Find the seat record and select Enroll seat from the actions menu in the rightmost table column. Or, open the seat record and select Enroll seat from the actions menu on the right of the details page.
Complete the Enroll seat form:
1. Select the Profile to use for issuing certificates against the seat. Only profiles that use the Enrollment Code authentication method are available.
2. The certificate properties for the selected profile are displayed. Verify to make sure they look okay.
3. Select Enroll to enroll the seat against that profile.
The system generates an enrollment code and displays it in a popup window. Select the copy icon to copy the enrollment code and store it somewhere safe.
Select Close to close the enrollment code popup.

What's next?

If the certificate profile uses a web-based enrollment method (Browser PKCS12, CSR, or DigiCert Trust Assistant):
- When you enroll the seat, an email is sent to the address in the seat record. The email includes the enrollment URL and instructions for how to request a certificate.
- Provide the corresponding enrollment code to the user via a secure method. To request a certificate, the user can open the enrollment URL in their web browser and enter the enrollment code to authenticate the request.
For other enrollment methods, the way you request a certificate varies and may include APIs or third-party tools. Submit the enrollment code in the appropriate manner based on the platform or client.
To manage enrollment requests, go to the Inventory > Enrollments page in Trust Lifecycle Manager. It includes options to view and reset enrollment codes. To learn more, see Manage enrollment requests.

Nesta secção: