Table of Contents
Advertisement
Table 1-1
Forms used for agent operations (Continued)
Form name
Agent-Initiated User Enrollment
(RA)
Manage Certificate Profiles
(CA,RA)
OCSP Service
(CA)
Accessing Agent Services
Access to the agent services forms requires certificate-based authentication. Only
users who authenticate with the correct certificate and who have been granted the
proper access privilege can access and use the forms. The operation uses the SSL
protocol; that is, you connect to the server using HTTPS (not HTTP) on the SSL
agent port. For example, if Certificate Management System is installed on a host
named
Services interface by using the following URL:
https://cmshost.example.com:8100
The Agent Services pages are written in HTML and are intended to be customized.
This document describes the default pages. If your administrator has customized
these pages, yours may differ from those described here. Check with the CMS
administrator for information on your local installation.
Administrator/Agent Certificate Enrollment
Immediately after installing any CMS instance, the administrator must enroll for
the initial administrator/agent certificate. This is the first user certificate that
Certificate Management System issues.
The initial user is both an administrator and an agent. This person can create
additional agents with the appropriate user privileges and issue them certificates.
Since there is no agent yet to approve the request, a special enrollment form allows
you to get this first certificate automatically.
Description
Use this form to enable Directory based Agent-initiated User
Enrollment. Once this feature is enabled agents can enroll users by
using a simple enrollment form on the user's behalf.
Use this form to Enable and Disable supported Certificate Profiles. Once
a profile is disabled, the Administrator is free to make more detailed
changes to the profile itself.
Use this form to manage the operation of the CMS internal OCSP
service. This optional service can be enabled during the CMS
installation procedure.
cmshost.example.com
and is running on port 8100, you invoke the Agent
Accessing Agent Services
Chapter 1
Agent Services
25
Advertisement
Table of Contents
