Red Hat CERTIFICATE SYSTEM 7.2 - AGENT GUIDE Manual page 11

A Certificate Manager agent performs the following tasks:
• Handling certificate requests.
An agent can list the certificate service requests received by the Certificate Manager subsystem, assign requests, reject
or cancel requests, and approve requests for certificate enrollment. See Chapter 3, CA: Handling Certificate Requests.
• Finding certificates.
Certificates can be searched individually or searched and listed by different criteria. The details for all returned certific-
ates are then displayed. See Chapter 4, CA: Finding and Revoking Certificates.
• Revoking certificates.
If a user's key is compromised, the certificate must be revoked to ensure that the key is not misused. Certificates be-
longing to users who have left the organization may also need revoked. Certificate Manager agents can find and revoke
a specific certificate or a set of certificates. Users can also request that their own certificates be revoked. See Section 4,
"Revoking Certificates".
• Updating the CRL.
The Certificate Manager maintains a public list of revoked certificates, called the certificate revocation list (CRL). The
list is usually maintained automatically, but, when necessary, the Certificate Manager agent services page can be used
to update the list manually. See Section 5.2, "Updating the CRL".
• Publishing certificates to a directory.
The Certificate System can be configured to publish certificates and and CRLs to an LDAP directory. This information
is usually published automatically, but the Certificate Manager agent services page can be used to update the directory
manually. See Section 2, "Manual Directory Updates".
• Managing certificate profiles.
The agent can enable and disable certificate profiles. A profile must be temporarily disabled for an administrator can
make changes to the profile itself through the administrative interface. Once the changes have been made, the agent
can re-enable the profile for regular use. See Chapter 2, CA: Working with Certificate Profiles.
2.2. Data Recovery Manager Agent
Figure 1.2. Certificate Manager Agent Services Page
Services
4 Chapter 1. Agent Services