Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual page 103

• Automatic storage of encryption private keys with the Data Recovery Manager
at the time a certificate is issued, if requested by the Registration Manager.
• Automatic revocation checking each time Personal Security Manager verifies a
certificate.
Behind the scenes, Personal Security Manager supports the following
cryptographic capabilities:
• SSL v2 and v3. SSL authentication, encryption, and tamper detection.
• S/MIME. Signed and encrypted email (using separate signing and encryption
keys if desired)
• PKCS #5. Encryption for private key storage.
• PKCS #7. Signing operations.
• PKCS #11. Communication with PKCS #11 modules and associated
cryptographic tokens (such as smart cards).
• PKCS #12. Export and import of certificates and associated private keys.
• CRMF/CMMF. Direct commmunication between Personal Security Manager
and a CA, simplifying enrollment processes and making one-click issuance
possible.
• Online Certificate Status Protocol (OCSP). Real-time revocation checking.
For more information about Personal Security Manager, check this site:
http://www.mozilla.org/projects/security/pki/psm/
The above site also provides links to deployment information as it becomes
available, including details on how to set up Certificate Management System for
use with Personal Security Manager.
Keep in mind that Personal Security Manager works only with Netscape
Communicator, version 4.7x, which can be downloaded from this site:
http://home.netscape.com/download/
Also note that Personal Security Manager is integrated into Netscape 6x as its
default security component. For more information about Netscape 6x, check this
site:
http://home.netscape.com/browsers/
Chapter 2 Certificate Enrollment and Life-Cycle Management
End Entities and Life-Cycle Management
103