Certificate Manager Agent Services - Red Hat CERTIFICATE SYSTEM 8 - AGENTS GUIDE Agents Manual

Chapter 1. Agent Services
• Registration Manager Agents process certificate requests; any approved requests are automatically
forwarded to the configured CA to issue the certificate. RA agents can also revoke certificates which
have been issued through the RA.
• Data Recovery Manager Agents initiate the recovery of lost keys and can obtain information about
key service requests and archived keys.
NOTE
Recovering lost or archived key information is done automatically in smart card
deployments because the TPS server is a DRM agent. Smart cards are marked as lost
in the TPS agent page, and then another smart card is later used to recover the old
encryption keys automatically during certificate enrollment.
• Online Certificate Status Manager Agents manage the configuration for verifying whether certificates
are revoked, so these agents can both manage CRLs (by managing the publishing CAs and
manually adding CRLs) and manage requests to check certificate status.
• Token Processing System Agents can perform tasks related to managing certificates stored on
tokens and smart cards, which includes viewing smart card enrollment and formatting activities;
listing, editing, and deleting tokens from the token database; and managing lost tokens.
The privileged operations of an agent are performed through the Certificate System agent services
pages. For a user to access these pages, the user must have a personal SSL client certificate and
have been identified as a privileged user in the user database by the Certificate System administrator.
For more information on creating privileged users, see the Certificate System Administrator's Guide.
Section 1.2.1, "Certificate Manager Agent Services"
•
Section 1.2.2, "Registration Manager Agent Services"
•
Section 1.2.3, "Data Recovery Manager Agent Services"
•
Section 1.2.4, "Online Certificate Status Manager Agent Services"
•
Section 1.2.5, "Token Processing System Agent Services"
•

1.2.1. Certificate Manager Agent Services

The default entry page for CA agent services is shown in
Services Page". Only designated Certificate Manager agents, with a valid certificate installed in their
client software, are authorized to access these pages.
4
Figure 1.2, "Certificate Manager Agent