<commit_before># Enrollment Station using YubiKey Smart Cards

A Smart Card enrollment station for use in enterprises with Microsoft Active Directory Certificate Services and certificate-based logons. This software package will streamline some operations such as enrolling and terminating Smart Card devices.

This project is an entry in the YubiKing 2015 competition and should be considered a work in progress.

### Dependencies
* Windows PKI (Active Directory Certificate Services)
* Enrollment Agent Certificate (see prerequisites)
* CCID smart cards from Yubico (currently Premium NEO and Premium NEO-N)
* (optional) YubiHSM

## Prerequisites
To use this tool you will need an Enrollment Agent Certificate which allows you to enroll certificates on behalf of other users. This certificate template is available on a default Active Directory Certificate Services (Windows CA) installation, but is normally not permitted for any users other than Domain Admins. For added security, create a dedicated user which is used as the enrollment station user.

**A. Setup Enrollment Agent certificate template permissions**

1. Log on to your Windows Certificate Authority
2. Open the Certificate Authority control panel
3. Right click the `Certificate Templates` folder and chose `Manage`
4. Find the `Enrollment Agent` template, right click on it and chose `Properties`
5. In the security tab, allow your enrollment station user to enroll the certificate.<commit_msg>Add link to Releases on README<commit_after># Enrollment Station using YubiKey Smart Cards

A Smart Card enrollment station for use in enterprises with Microsoft Active Directory Certificate Services and certificate-based logons. This software package will streamline some operations such as enrolling and terminating Smart Card devices.

This project is an entry in the YubiKing 2015 competition and should be considered a work in progress.

### Dependencies
* Windows PKI (Active Directory Certificate Services)
* Enrollment Agent Certificate (see prerequisites)
* CCID smart cards from Yubico (currently Premium NEO and Premium NEO-N)
* (optional) YubiHSM

## Download
You can find the latest binaries at our [releases page](https://github.com/CSIS/EnrollmentStation/releases). 

## Prerequisites
To use this tool you will need an Enrollment Agent Certificate which allows you to enroll certificates on behalf of other users. This certificate template is available on a default Active Directory Certificate Services (Windows CA) installation, but is normally not permitted for any users other than Domain Admins. For added security, create a dedicated user which is used as the enrollment station user.

**A. Setup Enrollment Agent certificate template permissions**

1. Log on to your Windows Certificate Authority
2. Open the Certificate Authority control panel
3. Right click the `Certificate Templates` folder and chose `Manage`
4. Find the `Enrollment Agent` template, right click on it and chose `Properties`
5. In the security tab, allow your enrollment station user to enroll the certificate.
{'fraction_non_alphanumeric': 0.03979125896934116, 'fraction_numerical': 0.005870841487279843, 'mean_word_length': 5.221095334685598, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 1, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 1, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '34023', 'n_tokens_mistral': 736, 'n_tokens_neox': 677, 'n_words': 429}