Access To Subsystems - Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual

Table 2-1 End entities, message formats, algorithms, and key pairs supported by Certificate Management
System
End entity software
Communicator 4.0 to 4.5
Internet Explorer 3.x and
4.x
Internet Explorer 5.x
Communicator 4.7x and
Netscape 6x
Netscape servers
(including CMS
managers) and other
servers
Cisco routers (version IOS
12.04) and VPN clients

Access to Subsystems

Three kinds of entities can access CMS subsystems: administrators, agents, and end
entities. Administrators are responsible for the initial setup and ongoing
maintenance of the subsystems. Agents manage the day-to-day operations of each
subsystem, such as responding to requests from end entities. End entities access
Registration Manager or Certificate Manager subsystems to enroll in a PKI and to
take part in other life-cycle management operations, such as renewal or revocation.
Figure 2-8 shows the ports used by administrators, agents, and end entities. All
agent and administrator interactions with CMS subsystems occur over HTTPS.
Enrollment message
format over HTTP or
HTTPS
KEYGEN tag
PKCS #10
PKCS #10
CRMF and CMMF
based on new
JavaScript API
PKCS #10
CEP
Cryptographic algorithms
Signing and encryption:
RSA
Signing only: RSA, DSA
Signing and encryption:
RSA
Signing only: RSA
Signing and encryption:
RSA
Signing only: RSA, DSA
Signing and encryption:
RSA
Signing only: RSA, DSA
Signing and encryption:
RSA
Signing and encryption:
RSA
Chapter 2 Certificate Enrollment and Life-Cycle Management
End Entities and Life-Cycle Management
No. of key pairs
Single key pair
Single key pair
Single or dual key
pairs
Single or dual key
pairs
Single key pair
Single key pair
99