Table of Contents
Advertisement
How Client Type Determines the End-Entity
Interface
Each type of end-entity form provided by Certificate Management System is
served by a servlet. This servlet determines which version of the form to present
based on information about the end entity (the type, version, language, and so on),
information in the form itself, and other factors.
Each form also specifies both an authentication manager and an output template:
•
An authentication manager is a configured instance of an authentication
plug-in module. When Certificate Management System receives a request from
an end entity, it uses the authentication manager specified by the request to
determine how to authenticate the end entity. For more information, see
Chapter 15, "Setting Up End-User Authentication" in CMS Installation and
Setup Guide.
•
The output template is an HTML page with embedded JavaScript used to
return information from the end entity to the servlet. For more information, see
"Responses and Output Templates" on page 17.
Based on all the information, a form's servlet sends the end entity the version of the
form (including the embedded JavaScript code) appropriate for that end entity. For
example, in the case of end entities that support the
Manager or Registration Manager sends a form that uses
and formulate a certificate request. In the case of end entities that support the
Certificate Management Message Format (CMMF) protocol, the Certificate
Manager or Registration Manager sends a form that uses a JavaScript API to fully
automate both key generation and certificate issuance.
Certificate Request Formats Specific to End
Entities
Table 2-1 lists the forms provided by the Certificate Manager and Registration
Manager for certificate issuance and life-cycle management operations, and
indicates supported authentication mechanisms and request formats. You can
customize any of the default forms and their corresponding servlets and output
templates. For details, see Chapter 3, "End-Entity Interface Reference."
KEYGEN
KEYGEN
Chapter 2
Introduction to End-Entity Services Interface
End-Entity Services Interface
tag, the Certificate
to generate keys
29
Advertisement
Table of Contents
