Agent Port; End-Entity Ports - Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual

Agent Port

The agent port is an SSL (encrypted) port at which Certificate Management System
listens to requests from agents; agents make these requests from the appropriate
Agent Services interface.
• The Certificate Manager and Registration Manager agents use the agent port to
process certificate issuance and management requests from end entities and to
perform certain other privileged operations over HTTPS.
• Data Recovery Manager agents use the agent port for recovering end users'
encryption private keys over HTTPS.
Agent functions always require SSL client authentication. For a brief list of
supported agent operations, see "Agent Services Interface" on page 68.
When you install Certificate Management System, it assigns a random number
(greater than 1024) as the agent port number and prompts you to change it, if
necessary; the port number can be any number between 1 and 65535. The number
you choose for the agent port affects your agent users—all agents access Certificate
Management System by specifying the name of the server (the CMS instance) and
the agent port number in the URL. For example, if you choose port number 4430,
the URL would look like this:
https://<hostname>:4430/<subsystem>
is in the form
<hostname>
is a prefix identifying the subsystem that hosts the agent interface:
<subsystem>
for the Certificate Manager,
Recovery Manager, and
For example, the URL to a Certificate Manager agent interface would look like this:
https://demoCA.example.com:5600/ca
If you change the agent port number, be sure to inform your agent users.

End-Entity Ports

For requests from end entities, Certificate Management System can listen to two
ports, an SSL (encrypted) port and a non-SSL port. End entities make these
requests from the end entity services interface; see "End-Entity Services Interface"
on page 72.
Certificate Management System provides the following services through the HTTP
and HTTPS ports:
<machine_name>.<your_domain>.<domain>
for the Registration Manager,
ra
for Online Certificate Status Manager.
ocsp
CMS Ports
for the Data
kra
Chapter 11 Setting Up Ports
ca
361