Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual page 824

linked CA An internally deployed certificate authority (CA) whose certificate is
signed by a public, third-party CA. The internal CA acts as the root CA for
certificates it issues, and the third-party CA acts as the root CA for certificates
issued by other CAs that are linked to the same third-party root CA. Also known as
"chained CA" and by other terms used by different public CAs.
manual authentication A way of configuring a CMS manager that requires
human approval of each certificate request. With this form of authentication, a
servlet forwards a certificate request to a request queue after successful
authentication module processing. An agent with appropriate privileges must then
approve each request individually before policy processing and certificate issuance
can proceed.
MD5 A message digest algorithm that was developed by Ronald Rivest. See also
one-way hash.
message digest See one-way hash.
misrepresentation The presentation of an entity as a person or organization that
it is not. For example, a web site might pretend to be a furniture store when it is
really just a site that takes credit-card payments but never sends any goods.
Misrepresentation is one form of impersonation. See also spoofing.
Netscape Certificate Management System (CMS) A highly configurable set of
software components and tools for creating, deploying, and managing certificates.
Certificate Management System comprises three major subsystems that can be
installed in different CMS instances in different physical locations: Certificate
Manager, Registration Manager, and Data Recovery Manager.
Netscape Console The Java application used to set up and manage Netscape
servers.
Netscape Security Services (NSS) A set of libraries designed to support
cross-platform development of security-enabled communications applications.
Applications built using the NSS libraries support the Secure Sockets Layer (SSL)
protocol for authentication, tamper detection, and encryption, and the PKCS #11
protocol for cryptographic token interfaces. Netscape uses NSS to support these
features in a wide range of products, including Certificate Management System.
NSS is also available separately as a software development kit.
nonrepudiation The inability by the sender of a message to deny having sent the
message. A digital signature provides one form of nonrepudiation.
824 Netscape Certificate Management System Installation and Setup Guide • March 2002