Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual page 799

Server (or site) certificate issuance
Figure 24-1
These are the steps shown in Figure 24-1:
The server administrator goes to the manual enrollment form hosted by the
1.
Registration Manager, pastes in the certificate signing request in PKCS #10
format, completes the other information in the enrollment form, and submits
the form.
(If the enrollment port is HTTPS, the administrator should visit the link that
delivers the CA's certificate chain and download the chain into the browser
that he or she will use for server enrollment.)
The Registration Manager verifies the authenticity of the request. Because the
2.
request requires manual authentication, the Registration Manager stores the
request in the queue for agent approval.
An agent processes the request and either rejects or approves it.
3.
The Registration Manager picks up the approved request and subjects it to
4.
policy checks.
If the request passes the Registration Manager's policy checking, the
5.
Registration Manager submits the request to the Certificate Manager for
signing. The Certificate Manager verifies the authenticity of the Registration
Manager by verifying the certificate presented by it. If it is a trusted
Registration Manager, the Certificate Manager accepts the request.
The Certificate Manager subjects the request to its own policy checks.
6.
Chapter 24 Issuing and Managing Server Certificates
Certificate Issuance to Servers
799