End-Entity Services Interface - Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual

Entry Points for Various Types of Users
Figure 1-8
Using the default forms, a Online Certificate Status Manager agent can perform
tasks such as checking which CAs are currently configured to publish their CRLs to
the Online Certificate Status Manager, identifying a Certificate Manager to the
Online Certificate Status Manager, adding CRLs directly to the Online Certificate
Status Manager, and viewing the status of OCSP service requests submitted by
OCSP-compliant clients.

End-Entity Services Interface

Certificate Management System provides HTML forms for various
entities—people, routers, servers, and others—that use certificates to identify
themselves and that need to be able to request certificate issuance and management
operations. These forms, collectively identified as End-Entity Services Interface, use
different protocols and life-cycle management procedures for different kinds of
end entities. For example, the Certificate Manager provides separate certificate
enrollment forms for clients such as Netscape Communicator, Netscape 6x, and
Microsoft Internet Explorer. The reason for this is that end entities running
Communicator versions earlier than 4.5 present an enrollment form based on the
use of the HTML tag
versions later than 4.7x (in conjunction with Netscape Personal Security Manager)
and Netscape 6.x present a form based on the use of the CMMF/CRMF protocol;
and end entities running Internet Explorer present a form based on PKCS #10, the
RSA standard for certificate request syntax.
72 Netscape Certificate Management System Installation and Setup Guide • March 2002
Online Certificate Status Manager Agent Services interface
to generate keys; end entities running Communicator
KEYGEN