Deployment Strategy And Port Assignments - Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual

Deployment Strategy and Port Assignments

Thus, a policy for a Certificate Manager might be that all subject names have to end
with
can enforce this policy and can also define their own, local naming policies, such as
ou=Engineering
Another variation is to have the Certificate Manager enforce the companywide
policies and have subordinate Certificate Managers, instead of Registration
Managers, enforce the names for individual departments. Each subordinate
Certificate Manager, in turn, can delegate enrollment responsibilities to multiple
Registration Managers, which can be configured to apply the policies uniformly in
different geographic locations.
For a detailed discussion of policy management, see Chapter 18, "Setting Up
Policies."
Deployment Strategy and Port Assignments
Before you install any CMS instance, you should review the decisions described in
this chapter and work out the relationships between the Certificate Managers, Data
Recovery Managers, Registration Managers, and Online Certificate Status
Managers you want to deploy for your organization. Once you have decided which
subsystems to install and where, fill out a copy of the worksheet provided in
Chapter 5, "Installation Worksheet" for each separate installation.
You can create multiple instances of Certificate Management System in a single
server root directory, each containing either one or two CMS managers. If you
want to install CMS managers on different hosts, you must run the entire
installation on each host, specifying the services for each instance of Certificate
Management System. You can also perform additional complete installations on
the same host in a different server root directory.
Figure 4-5 shows an example of how several CMS instances can be installed on a
single host machine. (Note that on a Windows NT system, you can install a single
server root only; multiple server roots are not permitted.)
180 Netscape Certificate Management System Installation and Setup Guide • March 2002
o=Example Corporation
.
. Registration Managers for individual departments