Enrolling Existing Customers - Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual

Some Enrollment Scenarios
The sections that follow describe how ExampleCorp uses Certificate Management
System to achieve these goals:
•

Enrolling Existing Customers

• Enrolling New Customers
• Enrolling Extranet Users
In all cases, ExampleCorp has decided to place its Certificate Manager behind the
firewall and its Registration Manager outside the firewall, for reasons summarized
in "Firewall Considerations" on page 84.
Enrolling Existing Customers
ExampleCorp has decided on the following process for registering its existing
customers, as shown in Figure 2-2.
Request certificate. The customer fills in and submits a form (over SSL) that
1.
specifies account information and other personal details stored in the existing
customer database.
Custom authentication. The Registration Manager uses a custom
2.
authentication module to verify the customer's account and status against the
existing customer database.
Request certificate. If authentication against the customer database is
3.
successful, the Registration Manager performs policy processing and, if
processing is successful, forwards the request to the Certificate Manager.
Issue certificate. The Certificate Manager performs its own policy processing
4.
and, if processing is successful, issues the certificate and delivers it to the
Registration Manager.
Deliver certificate. If the Certificate Manager successfully issues the certificate,
5.
the Registration Manager delivers it to the end user in the same session. If the
request is unsuccessful for any reason, the Registration Manager displays a
web page to the customer explaining the problem and what to do about it.
86 Netscape Certificate Management System Installation and Setup Guide • May 2002