80 Chapter 3 Using certificates
311644-J Rev 00
To edit the mastercert.spec file:
It is only necessary to edit this file if Off-line roaming is required.
These lines must be added in a specific section of the file. Please read
RoamServ60Admin.pdf for the specific details.
Profile Use for Roaming Users Setting:
offline_prof_use=1.2.840.113533.7.77.20,BitString,<offline_prof_us
e>
The following must appear on one line, with no wrap or line feed:
offline_prof_use=Boolean,Offline Roaming allowed:,Allow use of
roaming profiles in offline mode.,Range,0,1
To edit the entmgr.ini file:
It is only necessary to edit this file if Off-line roaming is required:
[Default Variable Values]
offline_prof_use=1
To edit the entrust.ini file:
Edit the entrust.ini file based on the Roaming requirements. Once the file is
edited, place it on the CA Server, Roaming Profile Server, and any client PC that
will be running a Roaming Profile.
Use the following edits to enable Roaming Profiles online (4 lines):
ProfileServer=<IP or DNS of Profile Server>+640
ProfileServerDN=<FDN of Roaming Profile user you create on RA>
RoamingIDField=<User ID attributes>
RoamSearchBase=<Search base of your CA>
Use the following edits to enable Roaming Profiles offline (2 lines optional):
DefaultProfileLocation=<Path to store the cached files>
OfflineProfileLifetime=<# of days the cached files will be valid>