Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual page 788

Revocation of Server Certificates
belonging to the end user. The end user can then select the certificate to be
revoked or can revoke all certificates in the list. The end user can also specify
additional details, such as the date of revocation and revocation reason for
each certificate or for the list as a whole. For instructions on how end users
revoke their certificates, see the online help available by clicking the Help
buttons on the end-entity forms.
• Agents can revoke certificates based on a range of serial numbers or based on
one or more subject name components. Upon submission of the revocation
request, the agent receives a list of certificates from which she or he can pick
the ones to be revoked. For instructions on how agents revoke end-entity
certificates, see CMS Agent's Guide.
Upon receiving the list of certificates to be revoked, the Registration Manager
formulates a CMMF request and sends it to the Certificate Manager. The Certificate
Manager marks the corresponding certificate records in its certificate store
(maintained in the internal database) as revoked and if configured to do so, removes
the revoked certificates from the publishing directory and updates the CRL in the
publishing directory.
788 Netscape Certificate Management System Installation and Setup Guide • March 2002