Using Verizon UniCERT UPI Certificate Authority

This section describes how to configure PIV Personal Identity Verification (technical standard of "HSPD-12") policies with the Verizon UniCERT UPI CA certificate templates.

1. In the Action column, next to PIV_AUTHENTICATION, select Add, and then click Configure. The Device Policy - Set Application Information page appears.

   

• Friendly Name—Enter a name for the application.

• Provisioning Method —Select Create Credential.

  Note: Selecting the Create Credential option is the equivalent of setting the former Recover Application option (available in previous ActivID CMS versions) to No.

• Provider—Select Verizon UniCERT UPI Authority.

• Certificate Authority—Select the Default UPI configuration template.

• Template—Select default template, which corresponds to the certificate template configured in Verizon UniCERT UPI CA for the PIV_Authentication application.

2. Click Submit. The Configure PIV_AUTHENTICATION Application page appears.

   

3. Enter appropriate values in all the required fields.

4. Click Set to return to the main Device Policy Configuration page.

5. Optionally, in the Action column, next to CARD_AUTHENTICATION, select Add, and then click Configure.

   

• Friendly Name—Enter a friendly name for the application.

• Provisioning Method —Select Create Credential.

• Provider—Select Verizon UniCERT UPI Authority.

• Certificate Authority—Select your Default UPI configuration template.

• Template—Select default template, which corresponds to the certificate template configured in Verizon UniCERT UPI CA for the CARD_AUTHENTICATION application.

6. Click Submit. The Configure CARD_AUTHENTICATION Application page appears.

   

7. Enter appropriate values in all the required fields.

8. Click Set to return to the main Device Policy Configuration page.

9. Optionally, in the Action column, next to PIV_DIGITAL_SIGNATURE, select Add, and then click Configure.

   

• Friendly Name—Enter a name for the application.

• Provisioning Method —Select Create Credential.

• Provider—Select Verizon UniCERT UPI Authority.

• Certificate Authority—Select your Default UPI configuration template.

• Template—Select default template, which corresponds to the certificate template configured in UniCERT UPI CA for the PIV_Digital_Signature application.

10. Click Submit. The Configure PIV_DIGITAL_SIGNATURE Application page appears.

    

11. Enter appropriate values in all the required fields

12. Click Set to return to the main Device Policy Configuration page.

13. Optionally, in the Action column, next to PIV_ENCRYPTION, select Update/ Add, and then click Configure.

    

• Friendly Name—Enter a friendly name for the application.

• Provisioning Method —Select Create Credential.

• Provider—Select Verizon UniCERT UPI Authority.

• Certificate Authority— Select your Default UPI configuration template.

• Template—Select default template, which corresponds to the certificate template configured in UniCERT UPI CA for the PIV_ENCRYPTION application.

14. Click Submit. The Configure PIV_ENCRYPTION Application page appears.

    

15. Enter appropriate values in all the required fields

16. Click Set to return to the main Device Policy Configuration page.

17. Click Save, and then click Done.