Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual page 393

The configuration files of both Certificate Manager and Registration Manager
include parameters that enable you to specify whether the server should do the
revocation checking and if it should, at what interval. Note that the
revocation-status verification works for only those agent certificates that have been
issued by the Certificate Manager (and not by any third-party CAs).
The configuration parameters pertaining to this feature of the Certificate Manager
are as follows:
auths.revocationChecking.bufferSize=5
auths.revocationChecking.ca=ca
auths.revocationChecking.enabled=true
auths.revocationChecking.unknownStateInterval=0
auths.revocationChecking.validityInterval=120
The configuration parameters pertaining to this feature of the Registration
Manager are as follows:
auths.revocationChecking.bufferSize=5
auths.revocationChecking.enabled=true
auths.revocationChecking.ra=ra
auths.revocationChecking.unknownStateInterval=0
auths.revocationChecking.validityInterval=120
If you have a Data Recovery Manager installed in the same instance, in addition to
the above lines, you'll also notice this line:
auths.revocationChecking.kra=kra
Table 13-1 provides details for the above mentioned parameters.
Table 13-1 Configuration parameters for checking the revocation status of agents' certificates
Parameter name
revocationChecking.bufferSize
revocationChecking.<subsystem>
revocationChecking.enabled
Description
Specifies the total number of last-checked certificates the
server should maintain in its cache. For example, if you
configure the buffer size to be 2, the server retains the last two
certificates it checked in its cache. By default, the server caches
the last 5 certificates.
Specifies the name of the CMS instance. <subsystem>
indicates whether the subsystem is a Certificate Manager (ca)
or Registration Manager (ra). You must not change the
default values.
Specifies whether revocation checking is to be is enabled or
disabled. To enable the feature, enter true; to disable the
feature, enter false. By default, the feature is enabled.
Chapter 13
Privileged-User Types and Responsibilities
Managing Privileged Users and Groups 393