Identity Lifecycle Manager 2007

Performing the workflow. To start the enrollment workflow, you must log on to the ILM 2007 certificate management Web portal as a member of the Certificate Managers group. To initiate the workflow, complete the following steps.

1. Start IE.
2. Open http://clmserver/clm.
3. Click the Microsoft Certificate Lifecycle Manager 2007 logo.
4. On the Home page, in the Common Tasks section, click Enroll a user for a new set of certificates or a smart card.
5. In the Search Criteria for Users section, in the Name box, type the username of the target subscriber, and click Search.
6. If you have multiple profile templates in your environment, select the Code Signing Certificates profile template, and click Next.
7. In the Data Collection section, type Driver's license, and click OK.
8. On the Request Status page, provide the value of One-time password 1 to the certificate subscriber.

After you initiate the workflow, the certificate subscriber can complete the workflow by using the one-time secret provided by the certificate manager. The certificate subscriber must connect to the ILM 2007 certificate management Web portal to complete the enrollment process. To complete the workflow, log on as the target subscriber and complete the following steps.

1. Start IE.
2. Open http://clmserver/clm.
3. Click the Microsoft Certificate Lifecycle Manager 2007 logo.
4. On the Home page, in the Common Tasks section, click Complete a request with one-time passwords.
5. In the Enter Passwords section, in the One-time password 1 box, type the one-time secret provided by the certificate manager, and click Next.
6. Click Yes to accept that the Web portal is submitting a request to the CA.
7. Click Yes to accept that the Web portal is installing certificates.
8. On the Installing Certificates page, click Next.
9. On the Request Summary page, ensure that the request status is completed.

Availability and Pricing
At press time, ILM 2007's scheduled release was May 1. License pricing is set at $15,000 per server and $25 per user for client access. These prices are a drastic reduction from the MIIS licensing model, in which licenses are $25,000 per processor. In addition, Microsoft is offering a 25 percent discount on user CALs as long as you order 250 or more user licenses and purchase Software Assurance.

You must purchase the CAL only if you decide to implement certificate management in your ILM 2007 deployment. If you use ILM 2007 strictly for metadirectory services, then no CALs are required in your deployment. But if you plan to issue and manage certificates with ILM 2007, you must obtain one CAL for each person that you manage (regardless of the number of user accounts the person holds in AD).

The Missing Link
By default, Microsoft's public key infrastructure (PKI) doesn't let you define and enforce management workflows or provide reports. ILM 2007's certificate management is PKI's missing link. Now you can easily define workflows for issuing high-assurance certificates. The CLM Web portal lets you manage certificates, and CLM MAs ensure that certificate revocation and issuance are part of your organization's provisioning and deprovisioning processes.