Red Hat CERTIFICATE SYSTEM 7.3 - AGENT GUIDE Manual page 17

Hide thumbs Also See for CERTIFICATE SYSTEM 7.3 - AGENT GUIDE:

Table of Contents

maintain and revoke certificates as necessary, and maintain global information about certificates.

Data Recovery Manager Agent

Data Recovery Manager (DRM) agents initiate the recovery of lost keys and can obtain informa-

tion about key service requests and archived keys.

Note

Recovering lost or archived key information is done automatically in smart card deploy-

ments because the TPS server is a DRM agent. Smart cards are marked as lost in the

TPS agent page, and then another smart card is later used to recover the old encryp-

tion keys automatically during certificate enrollment.

Online Certificate Status Manager Agent

Online Certificate Status Manager (OCSM) agents can perform tasks such as:

• Checking which CAs are currently configured to publish their CRLs to the OCSM.

• Identifying a CM to the OCSM.

• Adding CRLs directly to the OCSM.

• Viewing the status of OCSP service requests submitted by OCSP-compliant clients.

Token Processing System Agent

Token Processing System (TPS) agents can perform tasks such as:

• Viewing smart card enrollment and formatting activities.

• Listing tokens in the token database.

• Editing token information.

• Deleting tokens from the token database

• Marking tokens as permanently lost, temporarily lost, or damaged.

Token Key Service Agent

There is no direct interface for Token Key Service (TKS) agents to interact with the system.

However, TKS agents can provide the secure communications channel through the TPS server re-

quired for smart card operations through the token management system. The allowed smart card

operations are similar to those for TPS agents.

The privileged operations of an agent are performed through the Certificate System agent services

pages. For a user to access these pages, the user must have a personal SSL client certificate and

have been identified as a privileged user in the user database by the Certificate System administrator.

For more information on creating privileged users, see the Certificate System Administrator's Guide.

Agent Tasks

Table of Contents