Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual page 39

• Automatically delete expired and revoked certificates from the directory.
• Connect to the directory using password-based (basic) or certificate-based (in
the context of LDAP over SSL) authentication using a digital certificate.
Supports many methods for verifying the revocation status of
certificates
Revocation status of a certificate can be made available to PKI entities by
publishing the CRL to various repositories. To aid you in this process, the
Certificate Manager supports publishing of CRLs to the following repositories:
• An LDAP-compliant directory; see Chapter 19, "Setting Up LDAP Publishing
• A flat file; see Chapter 20, "Publishing Certificates and CRLs to a File
• An Online Certificate Status Protocol (OCSP)-compliant validation authority or
OCSP responder; see Chapter 21, "Setting Up an OCSP Responder
Applications in your enterprise may use any of these repositories to verify the
revocation status of a certificate.
Supports certificate generation for dual key pairs—separate key pairs
for signing and encrypting mail messages
To support separate key pairs for signing and encrypting data, Certificate
Management System supports generation of dual certificates for end entities
capable of generating dual key pairs. If a client makes a certificate request for dual
key pairs, the server issues two separate certificates.
For more information, see "Clients That Can Generate Dual Key Pairs" on
page 736.
Works with Netscape Personal Security Manager, that can generate
dual key pairs
Certificate Management System works seamlessly with Netscape Personal Security
Manager, which when plugged into Netscape Communicator version 4.7x enables
it to support protocols such as OCSP and CRMF/CMMF and generation dual key
pairs. Personal Security Manager is a standards-based, client-independent
application that performs PKI operations on behalf of Communicator 4.7x and
other applications. For additional details, see "Netscape Personal Security
Manager" on page 102.
Note that Personal Security Manager is integrated into Netscape 6 as its default
security component. For more information about Netscape 6, check this site:
http://home.netscape.com/browsers/
Chapter 1 Introduction to Certificate Management System
Overview of Key Features
39