Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual page 520

Introduction to Authentication
• The user must have requested the certificate using the manual enrollment
method—only the default manual enrollment form includes fields for entering
the challenge password when requesting a certificate.
• The user can revoke only those certificates that contain the specified serial
number with the corresponding challenge password. For example, if there is a
mismatch between the challenge password and serial number, the server
rejects the revocation request.
Certificate Revocation Forms
The End Entity Services interface of the Certificate Manager and Registration
Manager includes default HTML forms for both the SSL client authenticated
revocation and challenge-password-based revocation. The forms are accessible
from the Revocation tab. Figure 15-4 shows the form that enables end users to
revoke their certificates using a challenge password. You can view the form that
enables SSL client authenticated revocation by clicking the User Certificate link.
Figure 15-4
520 Netscape Certificate Management System Installation and Setup Guide • October 2001
Form for SSL client authenticated certificate revocation