Configuring the Certificate Manager
Setting Up Jobs
The jobs feature that allows you to run automated jobs is disabled after installation. You
need to enable and configure jobs in order to use this feature. For detailed information on
setting up jobs, see Chapter 14, "Automated Jobs."
Customizing the End Entity Interface
CS provides you with a set of forms that are available at the end entity interface and are
preconfigured for various types of interaction with the end entity. You can customize this
interface by changing which forms are available, and by changing the forms themselves.
You might change the look and feel of the form to fit in with your intranet, you might
change what method of authentication is associated with a form, and you might change
which policies are associated with the form.
Adding Data Recovery Services
You can set up a trusted relationship between a Data Recovery Manager and a Certificate
Manager so that the end-entities' private encryption keys are archived during the certificate
request. See Chapter 6, "Data Recovery Manager."
Setting Up a CMC Client
This section describes some utilities that demonstrate how to write a CMC client.
CMC Request Utility
The CMC Request Utility,
, is used to create a CMC request from one or more
CMCRequest
PCKS #10 or CRMF requests. The utility can also be used to revoke certificates. It is
installed along with CS and is available in the following directory:
<server_root>/bin/cert/tools
This utility takes a single .cfg file as a parameter. The .cfg file must include the formatted
CMC request:
CMCRequest <full pathname to .cfg file>
For revocation requests, the
parameter (described below) must be
revRequest.enable
set to
and related parameters must contain the appropriate information.
true
Chapter 3
Certificate Manager
115