Signed certificates

Authority administration {% if session.authority.certificate.organization %}of {{ session.authority.certificate.organization }}{% endif %} allowed for {% for user in session.authorization.admin_users %}{{ user.given_name }} {{user.surname }}{% if not loop.last %}, {% endif %}{% endfor %} from {% if "0.0.0.0/0" in session.authorization.admin_subnets %}anywhere{% else %} {% for subnet in session.authorization.admin_subnets %}{{ subnet }}{% if not loop.last %}, {% endif %}{% endfor %}{% endif %}. Authority valid from {{ session.authority.certificate.signed }} until {{ session.authority.certificate.expires }}. Authority certificate can be downloaded from here. Following certificates have been signed:

{% if session.authority %} {% if session.features.token %}

Tokens

Tokens allow enrolling smartphones and third party devices.

• You can issue yourself a token to be used on a mobile device
• Enter username to issue a token to issue a token for another user
• Enter e-mail address to issue a token to guest users outside domain

Issued tokens:

{% for token in session.authority.tokens %} {% include "views/token.html" %} {% endfor %}

{% endif %} {% if session.authorization.request_subnets %}

Pending requests

Use Certidude client to apply for a certificate. {% if not session.authorization.request_subnets %} Request submission disabled. {% elif "0.0.0.0/0" in session.authorization.request_subnets %} Request submission is enabled. {% else %} Request submission allowed from {% for subnet in session.authorization.request_subnets %} {{ subnet }}{% if not loop.last %}, {% endif %} {% endfor %}. {% endif %} See here for more information on manual signing request upload. {% if session.authorization.autosign_subnets %} {% if "0.0.0.0/0" in session.authorization.autosign_subnets %} All requests are automatically signed. {% else %} Requests from {% for subnet in session.authorization.autosign_subnets %} {{ subnet }}{% if not loop.last %}, {% endif %} {% endfor %} are automatically signed. {% endif %} {% endif %} {% if session.authorization.scep_subnets %} To enroll via SCEP from {% if "0.0.0.0/0" in session.authorization.scep_subnets %} anywhere {% else %} {% for subnet in session.authorization.scep_subnets %} {{ subnet }}{% if not loop.last %}, {% endif %} {% endfor %} {% endif %} use http://{{ session.authority.hostname }}/cgi-bin/pkiclient.exe as the enrollment URL. {% endif %}

{% endif %} {% if session.builder.profiles %}

LEDE imagebuilder

Hit a link to generate machine specific image. Note that this might take couple minutes to finish.

{% for name, title, filename in session.builder.profiles %}
• {{ title }}
{% endfor %}

{% endif %}

Revoked certificates

Following certificates have been revoked{% if session.features.crl %}, for more information click here{% endif %}.

{% for certificate in session.authority.revoked | sort(attribute="revoked", reverse=true) %} {% include "views/revoked.html" %} {% endfor %}