Authentication Of End Users During Certificate Revocation - Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual

If you want to change the form content to suit your organization's requirements,
edit the following file:
<server_root>/cert-<instance_id>/web-apps/ee/<subsystem>/UserRenewa
l.html
For details on individual form elements, see the online help available by clicking
the Help button on the form. For more information on customizing the form, see
CMS Customization Guide. To locate an online version of this guide, open the
<server_root>/manual/index.html

Authentication of End Users During Certificate Revocation

Certificates can be revoked by administrators, agents, and end users. When an end
user submits a certificate revocation request, the first step in the revocation process
is for the Certificate Manager or Registration Manager to identify and authenticate
the end user. The reason for this is when an end user attempts to revoke a
certificate, the server needs to verify that the user is attempting to revoke his or her
own certificate, not a certificate belonging to someone else.
Both Certificate Manager and Registration Manager support the following
methods of revocation:
• SSL client authenticated revocation
This method requires an end user to present a valid or revoked certificate that
has the same subject name as the one he or she wants to revoke. Without the
certificate, the user won't be able to revoke the certificate.
• Challenge-password-based revocation
This method requires an end user to enroll for a personal certificate using the
manual enrollment method. The reason for this is, by default, only the manual
enrollment form includes fields for entering the challenge password when
requesting a certificate. None of the other enrollment forms, for example
directory-based or NIS server-based forms, by default allow end users to
specify a challenge password.
You can use the manual-enrollment form (
and introduce the input fields for entering the challenge password in any of the
other end user enrollment forms. Keep in mind that this feature is available for
end-user certificates only; the feature is not available for other types of
certificates.
file.
ManUserEnroll.html
Chapter 15 Setting Up End-User Authentication
Introduction to Authentication
) as a model
497