Security And Directory Protocols - Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual

Standards Summary
• Certificate Request Message Format (CRMF). A message format used to
convey a request for a certificate to a Registration Manager or Certificate
Manager. A proposed standard from the Internet Engineering Task Force
(IETF) PKIX working group.
• Certificate Management Message Formats (CMMF). Message formats used to
convey certificate requests and revocation requests from end entities to a
Registration Manager or Certificate Manager and to send a variety of
information to end entities. A proposed standard from the IETF PKIX working
group. CMMF is subsumed by another proposed standard, CMC (next item).
• Certificate Management Messages over CMS (CMC). A general interface to
public-key certification products based on CMS and PKCS #10, including a
certificate enrollment protocol for DSA-signed certificates with Diffie-Hellman
public keys. A proposed standard from the IETF PKIX working group. CMC
incorporates CRMF and CMMF. Future versions of Certificate Management
System will support this standard as it is finalized.
• Cryptographic Message Syntax (CMS). A superset of PKCS #7 syntax used for
digital signatures and encryption. A proposed standard from the IETF PKIX
working group.
• PKIX Certificate and CRL Profile (PKIX Part 1). The first part of the four-part
standard under development by the IETF for a public-key infrastructure for the
Internet. Part 1 deals with specifications for certificates and CRLs. Certificate
Management System will support the other PKIX parts as they are finalized.
For more information about PKIX Part 1, see
ftp://ftp.isi.edu/in-notes/rfc2459.txt.

Security and Directory Protocols

Certificate Management System supports the following security and directory
protocols:
• FIPS PUBS 140-1. Federal Information Standards Publications (FIPS PUBS)
140-1 is a US government standard for implementations of cryptographic
modules—that is, hardware or software that encrypts and decrypts data or
performs other cryptographic operations (such as creating or verifying digital
signatures).
• Hypertext Transport Protocol (HTTP) and Hypertext Transport Protocol
Secure (HTTPS). Protocols used to communicate with web servers.
78 Netscape Certificate Management System Installation and Setup Guide • May 2002