Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual page 374

Privileged-User Types and Responsibilities
Figure 13-1
Each subsystem installed in a CMS instance must have at least one agent. You can
also have more than one individual managing agent services.
You create agents by adding them to the internal database of a CMS instance,
assigning membership in the appropriate agent groups, and identifying certificates
that the agents must use for SSL client authentication to the subsystem (for it to
service requests from the agents). For information about agents' certificates, see
"Agent's Certificate for SSL Client Authentication" on page 375. For information
on creating agents for a CMS instance, see "Setting Up Agents" on page 391.
During installation, Certificate Management System automatically creates
appropriate groups with agent privileges for the CMS managers installed; for
example, if you install a Certificate Manager and a Data Recovery Manager in a
CMS instance, you'll see two agent groups. For more information about these
groups, see "Groups for Agents" on page 385.
Certificate Management System authenticates users with agent-level privileges
based on its built-in authentication mechanism. This is explained in
"Authentication of Agents" on page 492.
374 Netscape Certificate Management System Installation and Setup Guide • March 2002
Agents use the HTML forms-based interface called Agent Services