Table of Contents
Advertisement
Updating the Directory with Changes
•
When Certificate Management System issues a new certificate, the certificate is
published to the directory.
•
When Certificate Management System revokes a certificate, the certificate is
removed from the directory.
•
When the CRL is created or updated, the list is published to the directory.
Manual Directory Updates
Normally you do not need to update a directory manually; most updates are done
automatically. You must update the directory manually in the following situations:
•
Directory Server is down for a period of time and unable to receive changes
from Certificate Management System.
•
You want to remove expired certificates from the directory. Expired certificates
are not automatically removed from the directory upon expiration. (Generally,
any client using a certificate is responsible for determining that it is valid by
checking its expiration date against the client's current date information.)
Using the Update Directory Server form available from the Certificate Manager
Agent Services page, you make the following changes in the directory:
•
Update the CRL in the directory.
•
Update information on valid certificates (for example, update the server with
newly issued certificates or recently renewed certificates).
•
Remove expired certificates.
•
Remove revoked certificates.
Note that only a Certificate Manager agent with the proper certificate can access
the Update Directory Server form.
Updating the Directory with Changes
To manually update the directory with changes:
Go to the Certificate Manager Agent Services page (see "Accessing Agent
1.
Services" on page 23). You must submit the proper client certificate to get
access to this page.
Click Update Directory Server.
2.
60
Netscape Certificate Management System Agent's Guide • March 2002
Advertisement
Table of Contents
