Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual page 828

signing certificate A certificate whose public key corresponds to a private key
used to create digital signatures. For example, Certificate Manager must have a
signing certificate whose public key corresponds to the private key it uses to sign
the certificates it issues. A Registration Manager must have a signing certificate
whose public key corresponds to the private key it uses to sign the certificate
requests it sends to the Certificate Manager.
signing key A private key used for signing only. A signing key and its equivalent
public key, plus an encryption key and its equivalent public key, constitute a dual
key pair.
single sign-on 1. In Certificate Management System, a password that simplifies
the way you sign on to Netscape Certificate Management System by storing the
passwords for the internal database and tokens. Each time you log on, you're
required to enter just this single password. 2. The ability for a user to log in once to
a single computer and be authenticated automatically by a variety of servers within
a network. Partial single sign-on solutions can take many forms, including
mechanisms for automatically tracking passwords used with different servers.
Certificates support single sign-on within a public-key infrastructure (PKI). A user
can log in once to a local client's private-key database and thereafter, as long as the
client software is running, rely on certificate-based authentication to access each
server within an organization that the user is allowed to access.
slot The portion of a PKCS #11 module (implemented in either hardware or
software) that contains a token.
smart card A small device, typically about the size of a credit card, that contains a
microprocessor and is capable of storing cryptographic information (such as keys
and certificates) and performing cryptographic operations. Smart cards implement
some or all of the PKCS #11 interface.
spoofing The act of pretending to be someone else. For example, a person can
pretend to have the email address , or a computer can identify
jdoe@example.com
itself as a site called when it is not. Spoofing is one form of
www.netscape.com
impersonation. See also misrepresentation, impersonation.
SSL See Secure Sockets Layer (SSL).
subject The entity identified by a certificate. In particular, the subject field of a
certificate contains a subject name that uniquely describes the certified entity.
subject name A distinguished name (DN) that uniquely describes the subject of a
certificate.
828 Netscape Certificate Management System Installation and Setup Guide • March 2002