Subsystems That Can Function As Trusted Managers - Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual

Privileged-User Types and Responsibilities

Subsystems That Can Function as Trusted Managers

In Certificate Management System, the Registration Manager and Certificate
Manager can function as a trusted manager; the Data Recovery Manager and
Online Certificate Status Manager cannot function as a trusted manager.
You can configure a Certificate Manager to delegate its end-entity interactions to a
trusted Registration Manager, for reasons of localizability (proximity to end
entities), customizability, and CA scalability; the Certificate Manager trusts the
Registration Manager and signs all certificate signing requests sent by this
Registration Manager. For example, as illustrated in the figure below, you might
deploy one or more Registration Managers to process, approve, and forward
certificate signing requests to a Certificate Manager.
You can configure a Data Recovery Manager to delegate its end-entity interactions
to a trusted Certificate Manager or Registration Manager for security reasons; the
Data Recovery Manager trusts the Certificate Manager or Registration Manager
and services all key archival and recovery requests initiated by this subsystem. For
example, as illustrated in figure below, you might deploy one or more Certificate
Managers or Registration Managers to send key archival or recovery requests to a
Data Recovery Manager.
Chapter 13 Managing Privileged Users and Groups 381