Group For Trusted Managers - Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual

Groups and Their Privileges
The
Online Certificate Status Manager Agents
agent-specific resources of the Online Certificate Status Manager; that is, privileged
users you add to this group automatically inherit access rights to the agent ports of
the Online Certificate Status Manager. For information on ports, see "CMS Ports"
on page 371.
After installation, you should add to this group the privileged users to whom you
want to assign Online Certificate Status Manager agent privileges. All agents who
belong to the
Online Certificate Status Manager Agent Services interface; see "Online Certificate
Status Manager Agent Services Interface" on page 71.
For an agent to be able to do SSL client-authenticated communication with a
Online Certificate Status Manager, you need to do additional configurations. See
"Setting Up Agents" on page 406.

Group for Trusted Managers

When the Certificate Manager, Registration Manager, or Data Recovery Manager is
installed, a group called
database. By default, this group has no entries.
The
Trusted Managers
gateway; that is, the subsystems you add to this group automatically inherit access
rights to the agent port of the corresponding Certificate Manager, Registration
Manager, or Data Recovery Manager. For information on ports, see "CMS Ports"
on page 371.
After installation, you should add to this group the subsystems that you want to
function as trusted managers. All subsystems that belong to the
Managers
subsystem that trusts them and receive responses back.
For a Registration Manager to be able to do SSL client-authenticated
communication with a subsystem, you need to do additional configurations. See
"Setting Up Trusted Managers" on page 413.
402 Netscape Certificate Management System Installation and Setup Guide • October 2001
Online Certificate Status Manager Agents
Trusted Managers
group has access rights to the corresponding agent
group can carry on SSL client-authenticated communication with the
group has access rights to
group can access the
is automatically created in its internal
Trusted