Topology Decisions; Server Groups And Cms Instances; Single Certificate Manager - Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual

Topology Decisions

Topology Decisions
Certificate Management System allows you to install the Certificate Manager,
Registration Manager, Data Recovery Manager, and Online Certificate Status
Manager in many different configurations.
Since CAs can delegate some responsibilities to subordinate CAs, a Certificate
Manager might delegate responsibilities to one or more levels of subordinate
Certificate Managers. Therefore many complex variations are possible. You should
carefully consider the appropriate topology for your deployment before you make
any other deployment plans.
The sections that follow describe the simplest arrangements:
• Server Groups and CMS Instances (page 162)
• Single Certificate Manager (page 162)
• Certificate Manager and Registration Manager (page 163)
• Certificate Manager and Data Recovery Manager (page 165)
• Certificate Manager, Data Recovery Manager, and Registration Manager
(page 167)
• Cloned Certificate Manager

Server Groups and CMS Instances

As described in Managing Servers with Netscape Console, Netscape servers installed
in a single server root directory are called a server group and are managed by a
single instance of Netscape Administration Server. A CMS instance in a server
group can contain a single subsystem of any kind.

Single Certificate Manager

Some deployments may require only a single Certificate Manager that handles all
end-entity interactions and provides no key archival and recovery capabilities. This
Certificate Manager can use a signing certificate issued by a public certificate
authority or its own self-signed CA signing certificate to sign all the certificates it
issues.
162 Netscape Certificate Management System Installation and Setup Guide • March 2002