Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual page 35

• Publishes certificates and CRLs to a flat file for importing into other resources.
For example, the sample code for Flat File CRL and certificate publisher can be
customized to store certificates and CRLs in an Oracle RDBMS
information, see Chapter 20, "Publishing Certificates and CRLs to a File."
• Publishes CRLs to an online validation authority (or OCSP responder),
enabling real-time verification of certificates by OCSP-compliant clients. For
more information, see Chapter 21, "Setting Up an OCSP Responder."
Separate subsystems for certificate and key operations
Certificate Management System includes four servers, the Certificate Manager,
Registration Manager, Data Recovery Manager, and Online Certificate Status Manager.
• The Certificate Manager functions as the certificate authority (CA); it is the
entity named in the issuer field of a certificate. The Certificate Manager can
sign and revoke certificates and generate CRLs. It can accept certificate
requests directly from end entities and via Registration Managers to which it
has delegated certain certificate management functions, such as authentication
of an end entity. The Certificate Manager also maintains a database of issued
certificates so that it can track renewal, expiration, and revocation.
• The Registration Manager is an optional component in the PKI; it is a
subordinate server to which a Certificate Manager can delegate some
certificate management functions. For example, a Registration Manager may
act as a front end to a Certificate Manager, performing tasks such as end-entity
authentication and formulation of the certificate request for the Certificate
Manager.
• The Data Recovery Manager is an optional component in the PKI. It provides
key archival and recovery services for end users' encryption private keys.
• The Online Certificate Status Manager is an optional, but important
component in the PKI. It enables real-time verification of certificates issued by
one or more Certificate Managers.
For an overview of these subsystems, see "CMS Subsystems or Managers" on
page 44.
Chapter 1 Introduction to Certificate Management System
Overview of Key Features
TM
. For more
35