MS CA Agent Overview & Prerequisites

Overview

The MS CA Agent allows UCMS to securely connect to an existing Enterprise CA registered in Active Directory, and request x.509 certificates on behalf of users. 

Connection between the agent and UCMS is done over TLS, protected with mutual TLS authentication. The agent itself then communicates to the Microsoft CA over DCOM/RPC.

Warning

Axiad advises against exposing your PKI to the internet and recommends using an IPSec VPN to maintain security.

If you wish to configure it differently, then Axiad can help you find a solution, but you accept that there is additional risk.

Please reach out to customer success if you have any questions about this or any other Axiad feature.

System Requirements

Minimum Hardware Requirements

• CPU Clock Speed: 2.0 GHz or Higher 

• Minimum Memory: 4 GB or Higher 

Minimum Software Requirements 

• Operating system: Windows Server 2012R2/2016/2019: 

• Features:

  • .Net Framework: 4.5.1 

  • minimum IIS (Internet Information Services) Web Server