Authentication And Policy Modules; Standards Summary; Certificate Management Formats And Protocols - Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual

Authentication and Policy Modules

The top layer of Figure 1-10 consists of authentication and policy modules. Several
default modules ship with Certificate Management System; third parties can create
their own custom modules using the APIs provided above the middleware and
subsystem layers. Modules for all three subsystems work the same way and are
interchangeable.

Standards Summary

This section summarizes the standard message formats and protocols supported
by Certificate Management System.

Certificate Management Formats and Protocols

Certificate Management System supports the following certificate management
formats and protocols. For more details about the proposed PKIX standards listed
here, see
Internet Drafts).
• Certificate Enrollment Protocol (CEP). A certificate management protocol
jointly developed by Cisco Systems and VeriSign, Inc. CEP is an early
implementation of CMC (described later in this list). CEP specifies how a
device communicates with a CA, including how to retrieve the CA's public
key, how to enroll a device with the CA, and how to retrieve a CRL. CEP uses
PKCS #7 and PKCS #10.
• Certificate Request Message Format (CRMF). A message format used to
convey a request for a certificate to a Registration Manager or Certificate
Manager. A proposed standard from the Internet Engineering Task Force
(IETF) PKIX working group.
• Certificate Management Message Formats (CMMF). Message formats used to
convey certificate requests and revocation requests from end entities to a
Registration Manager or Certificate Manager and to send a variety of
information to end entities. A proposed standard from the IETF PKIX working
group. CMMF is subsumed by another proposed standard, CMC (next item).
http://www.ietf.org/html.charters/pkix-charter.html
Chapter 1 Introduction to Certificate Management System
Standards Summary
(under
77