You can assign a user personal key only to users, user groups, or organizational units.
Verify that the LDAP task is set up to register the Active Directory server.
Note
The FRP Upgrade task fails to process user personal keys, on ePO - On-prem versions other than 5.1.2 and 5.3, even though the Active Directory server is turned online after being offline. The workaround for this is to restart the services of ePO - On-prem (any version) to process the user personal keys.
Click Menu → Data Protection → FRP keys.
Actions → Key Assignments → Assign UPKs to assign a user personal key.
Assign the user personal key to the user, user group, or organizational unit by selecting from either Users, From the groups, or From the organizational units accordingly.
(Optional) Select Recursive to assign the key to subgroups of the selected groups (if applicable).
In the Authentication Type area, select either of the following:
OS authentication — To enable users to access assigned keys through operating system authentication.
Note
The ePO - On-prem administrator has the flexibility to mandate that the user authenticates using the Active Directory user name and password for the first time that the OS token is used on a given Windows system. This can be configured from the OS Token tab of the Authentication policy.
Password authentication — To enable users to access assigned keys through password authentication.
Smart card PKI authentication — To enable users to access assigned keys through smart card authentication.
Virtual smart card authentication — To enable users to access assigned keys through virtual smart card authentication.
Click OK.
The key assignment is processed as a task. You can view the task progress in the Trellix server task log. This task is automated and runs immediately after key assignment. If this task is not successfully run immediately after key assignment, it is run as part of the daily FRP Process key assignments task or when the task is run manually.
When the key assignment task is complete, the key is available to users or user groups. The key assignment process can be in these states:
Pending Processing — In the queue or being prepared for processing.
Processing in Progress — Key assignment process is in progress.
Processing was Successful — Keys are available to the assigned users and user groups.
Note
Similar to the key assignment, the key unassignment process can be in these states: Pending Unassignment, Processing Unassignment, and Successfully Unassigned.