Topology Decisions; Server Groups And Cms Instances - Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual

Topology Decisions

Topology Decisions
Certificate Management System allows you to install the Certificate Manager,
Registration Manager, Data Recovery Manager, and Online Certificate Status
Manager in many different configurations.
Since CAs can delegate some responsibilities to subordinate CAs, a Certificate
Manager might delegate responsibilities to one or more levels of subordinate
Certificate Managers. Therefore many complex variations are possible. You should
carefully consider the appropriate topology for your deployment before you make
any other deployment plans.
The sections that follow describe the simplest arrangements:
• Server Groups and CMS Instances (page 164)
• Single Certificate Manager (page 165)
• Certificate Manager and Registration Manager (page 166)
• Certificate Manager and Data Recovery Manager (page 168)
• Certificate Manager, Data Recovery Manager, and Registration Manager
(page 170)
• Cloned Certificate Manager

Server Groups and CMS Instances

As described in Managing Servers with Netscape Console, Netscape servers installed
in a single server root directory are called a server group and are managed by a
single instance of Netscape Administration Server. As shown in Figure 4-1, a CMS
instance in a server group can contain a single subsystem of any kind, or either of
the following combinations:
• One Certificate Manager and one Data Recovery Manager
• One Registration Manager and one Data Recovery Manager
Other combinations are not permitted.
A Certificate Manager and a Registration Manager or Online Certificate Status
Manager are always permitted in separate instances, whether the instances are in
the same server group, in separate server groups on the same machine, or in
separate server groups on separate machines.
164 Netscape Certificate Management System Installation and Setup Guide • October 2001