System Overview - Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual

Java SDK extension mechanism for customization
The software development kit (SDK) provided with Certificate Management
System includes APIs and tutorials for customizing different aspects of the system.
You can write the following custom modules:
• Authentication—for authenticating end entities during certificate enrollment.
• Policy—for setting the rules applied by the individual subsystems.
• Jobs—for PKI-related jobs that run with the individual systems.
• Mapper and publisher classes—for publishing certificates and CRLs to an
LDAP-compliant directory, flat file, and an OCSP responder.
For information about writing custom plug-ins, see "CMS SDK" on page 65.
For information on customizing end-entity and agent interfaces (HTML forms and
templates), see CMS Customization Guide.
Easy upgrade from previous versions of Certificate Management
System
Certificate Management System provides an easy upgrade path from its previous
version.
GUI-based server installation and management
An installation wizard automates the installation and initial configuration process,
helping you install Certificate Management System quickly and easily. Then after
installation, you can locally or remotely administer Certificate Management
System from various computers on your network (using the encryption, message
integrity, and authentication services of SSL) with the help of an administration
interface called the Certificate Management System window or the CMS window.
For more information, see "The CMS Window" on page 338.

System Overview

Certificate Management System provides a highly scalable, easily deployable
certificate infrastructure for supporting encryption, authentication, tamper
detection, and digital signatures in networked communications. It is based on open
standards and protocols that include the following:
• Public-Key Cryptography Standard (PKCS) #11
Chapter 1 Introduction to Certificate Management System
System Overview
41