Middleware/Java 2 Layers; Authentication And Policy Modules; Standards Summary; Certificate Management Formats And Protocols - Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual

Middleware/Java 2 Layers

A middleware layer above JSS and the Java/JNI layer provides a range of services
required by the Registration Manager, Certificate Manager, Data Recovery
Manager, and Online Certificate Status Manager. The middleware layer is based on
Java 2.0 SDK, and it underlies both the manager subsystems and the APIs available
to third-party developers for building custom authentication and policy modules.
The default authentication and policy modules provided with Certificate
Management System are built from the same Java classes.

Authentication and Policy Modules

The top layer of Figure 1-10 consists of authentication and policy modules. Several
default modules ship with Certificate Management System; third parties can create
their own custom modules using the APIs provided above the middleware and
subsystem layers. Modules for all three subsystems work the same way and are
interchangeable.

Standards Summary

This section summarizes the standard message formats and protocols supported
by Certificate Management System.

Certificate Management Formats and Protocols

Certificate Management System supports the following certificate management
formats and protocols. For more details about the proposed PKIX standards listed
here, see
Internet Drafts).
• Simple Certificate Enrollment Protocol (SCEP). A certificate management
protocol jointly developed by Cisco Systems and VeriSign, Inc. CEP is an early
implementation of CMC (described later in this list). CEP specifies how a
device communicates with a CA, including how to retrieve the CA's public
key, how to enroll a device with the CA, and how to retrieve a CRL. CEP uses
PKCS #7 and PKCS #10.
http://www.ietf.org/html.charters/pkix-charter.html
Chapter 1 Introduction to Certificate Management System
Standards Summary
(under
77