Certificate System Users - Red Hat CERTIFICATE SYSTEM 7.3 - AGENT GUIDE Manual

Certificate System Users

2.1.2. Certificate System Users
Three kinds of users can access Certificate System subsystems: administrators, agents, and end entit-
ies. Administrators are responsible for the initial setup and ongoing maintenance of the subsystems.
Administrators can also assign agent status to users. Agents manage day-to-day interactions with end
entities, which can be users or servers and clients, and other aspects of the PKI. End entities must ac-
cess a Certificate Manager (CM) subsystem to enroll for certificates in a PKI deployment and for certi-
ficate maintenance, such as renewal or revocation.
Figure 2.1, "The Certificate System and Users" shows the ports used by administrators, agents, and
end entities. All agent and administrator interactions with Certificate System subsystems occur over
HTTPS. End-entity interactions can take place over HTTP or HTTPS.
9