Table of Contents
Advertisement
•
Renewal
•
Revocation
•
Any
•
Searching by Request Owner. There are to ways to search by the request owner:
•
Search for requests assigned to self
•
Search for requests assigned to a particular agent (based on UID attribute)
Both of the following search constraints apply to any of the search operations:
•
Maximum number of entries to return.
•
Maximum time to use to perform the search.
3. Approving Requests
There are two ways that a certificate request is approved, depending on the user authentication method required by the pro-
file. In automatic enrollment, the Certificate System automatically receives and approves the request if it meets established
criteria. In manual enrollment, an agent must review and approve the request. Before approving a request, an agent can ad-
just some of the parameters, such as the subject name and validity period.
To adjust and approve a certificate request, do the following:
1.
Open the agent services page.
https://server.example.com:9443/ca/agent/ca
2.
Click Find at the bottom of the List requests page to list pending certificate requests.
3.
Select the certificate request from the list.
4.
The certificate request details page contains several tables with information about the request:
•
Request Information. Lists basic information about the request.
•
Certificate Profile Information. Lists the certificate profile being used, along with basic information about that
certificate profile.
•
Certificate Profile Inputs. Lists the inputs contained in the enrollment form for this certificate profile as well as
the values set by the requester.
•
Policy Information. Lists the policies that apply to this certificate profile, including the definition of the policy,
the value placed in the certificate by this specific policy, and the constraints placed on this policy.
To change any of the information contained in the certificate, such as the subject name or validity period, change the
settings in the policy information table in the certificate request. Any policies that can be changed have either a drop-
down list or an editable field.
For any changes, the values must be valid within the constraints placed on a policy. If a change is made outside the
constraint, the request will not validate. An invalid request must be changed before a certificate is issued.
5.
Choose an action from the menu at the bottom of the page:
•
Approve Request. Approves the request and issues the certificate.
•
Update Request. Updates the request with any modified information. The status of the request does not change.
•
Validate Request. Confirms that the request conforms to the constraints for issuing that type of certificate. The re-
3. Approving Requests
24
Chapter 3. CA: Handling Certificate
Advertisement
Table of Contents
