Step 4. Set Up Privileged Users; Step 5. Customize End-Entity And Agent Forms; Step 6. Setup Authentication For End Users - Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual

• Check the certificate database to see which CA certificates are trusted. Delete
any unwanted CA certificates, change the trust settings of CA certificates that
you don't want to trust to untrusted, and install any new CA certificate or
certificate chains. For details, see "Managing the Certificate Database" on
page 502.

Step 4. Set up Privileged Users

Set up required administrators and agents. This way you can delegate
administration and agent tasks to other individuals. For details, see "Setting Up
Privileged Users" on page 403.
If you have installed remote Registration Managers that have certificates signed by
third-party CAs (that is, not by a Certificate Manager), you should add their
certificates to the Certificate Manager's database to facilitate SSL client
authenticated communication. For details, see "Setting Up Trusted Managers" on
page 413.

Step 5. Customize End-Entity and Agent Forms

End entities can interact with the Certificate Manager and Registration Manager
with the help of end-entity forms; end entities cannot interact with the Data
Recovery Manager. Similarly, agents can interact with the appropriate subsystem
using the agent forms. Certificate Management System provides HTML
forms-based interfaces for end entities and agents out of the box. For details, see
CMS Customization Guide.
Determine which forms you want to use for end-entity enrollment and whether
they require any customization. You may also use your own forms for this
purpose, provided you add the required JavaScript.
When customizing end-entity forms, keep in mind the authentication
method—manual or automated—you want to employ for your end entities.

Step 6. Setup Authentication for End Users

Depending on how you've deployed Certificate Management System, you may
need to do this for a Certificate Manager or Registration Manager, or for both. For
example, you may have a PKI setup in which Registration Managers act as front
ends to Certificate Managers—that is, end entities interact with Registration
Managers only; they do not interact with the Certificate Manager.
Determine which of the authentication plug-in module is suitable for your users
and then configure the Certificate Manager or Registration Manager to use that
authentication method; see "Configuring Authentication for End-User Enrollment"
on page 521.
Road Map to Configuring Subsystems
Chapter 10 CMS Configuration 367