Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual page 39

You can customize audit logs to include the information you want to include in the audit
log. See "Signed Audit Log," on page 268 for complete details.
Internal Database
Each subsystem has its own internal database where it stores such things as issued
certificates, certificate requests, and so on. The internal database is an instance of Netscape
Directory Server that is used exclusively as the internal database for this subsystem. See
"The Internal Database," on page 281 for complete details.
Authorization
CS is preconfigured with four types of users who have various access to the system:
• Administrators who can perform any administrative or configuration task.
• Agents who can edit and approve requests.
• Auditors who can view and configure audit logs.
• Trusted Managers which are subsystems that have a trusted relationship with another
subsystem.
CS allows you to create users, and assign them the privileges of whichever group in which
they are members. A user only has privileges for the instance of the subsystem in which the
user is created and the privileges of the group in which the user is a member.
A configurable plug-in framework is provided to tailor authorization in your deployment.
You can change the default privileges of the groups that are preconfigured by changing
ACLs associated with those groups. You can create new groups, assigning privileges to the
group by adding them to ACLs defining permissions. For example, you might create a
special kind of administrator who is able to run the basic operations of the subsystem, but is
not able to configure any of the features. See Chapter 9, "Authorization" for complete
details.
Self Tests
CS contains a new feature called Self Tests that performs certain tests of the system that
happen at startup and can also be manual started in the CS console. The tests then report
results of the tests that you can view. You can configure which test you want to run, and
create customized tests. See "Self Tests," on page 272 for complete details.
Notifications
Notifications is a feature that allows you to set up automated messages when a particular
event occurs, such as when a certificate is issued, or revoked. See Chapter 13, "Automated
Notifications" for complete details.
How Certificate System Works
Chapter 1 Overview 39