Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual page 826

private key One of a pair of keys used in public-key cryptography. The private
key is kept secret and is used to decrypt data encrypted with the corresponding
public key.
proof-of-Archival (POA) Data signed with the private Data Recovery Manager
transport key that contains information about an archived end-entity key,
including key serial number, name of the Data Recovery Manager, subject name of
the corresponding certificate, and date of archival. The signed proof-of-archival
data is the response returned by the Data Recovery Manager to the Registration
Manager or Certificate Manager after a successful key archival operation. See also
Data Recovery Manager transport certificate.
public key One of a pair of keys used in public-key cryptography. The public key
is distributed freely and published as part of a certificate. It is typically used to
encrypt data sent to the public key's owner, who then decrypts the data with the
corresponding private key.
public-key cryptography A set of well-established techniques and standards that
allow an entity to verify its identity electronically or to sign and encrypt electronic
data. Two keys are involved: a public key and a private key. A public key is
published as part of a certificate, which associates that key with a particular
identity. The corresponding private key is kept secret. Data encrypted with the
public key can be decrypted only with the private key.
public-key infrastructure (PKI) The standards and services that facilitate the use
of public-key cryptography and X.509 v3 certificates in a networked environment.
RC2, RC4 Cryptographic algorithms developed for RSA Data Security by Rivest.
See also cryptographic algorithm.
registration See enrollment.
Registration Manager An optional, independent CMS subsystem that performs
tasks involving end entities, such as enrollment or renewal, on behalf of a
Certificate Manager. The Registration Manager can be configured to process
requests and approve them either manually (that is, with the aid of a human being)
or automatically (based entirely on customizable policies and procedures). After
the Registration Manager approves requests, it typically forwards them to the
Certificate Manager, which processes them and returns the issued certificates to the
Registration Manager. The Registration Manager then distributes the certificates to
the end entities and (typically) publishes them to the appropriate directory.
826 Netscape Certificate Management System Installation and Setup Guide • March 2002