End Entities And Life-Cycle Management; Life-Cycle Management Formats And Protocols - Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual

End Entities and Life-Cycle Management

End Entities and Life-Cycle Management
Certificate Management System provides default web forms for all end-entity
interactions involved in managing the life cycle of a certificate. It also provides
forms, collectively called Agent Services, for agent interactions. These forms can be
used as is or customized. The Netscape Personal Security Manager is a software
that improves the PKI abilities of Netscape Communicator 4.7x versions; Personal
Security Manager is built into Netscape 6x.)
The sections that follow introduce the end-entity forms and protocols.
•

Life-Cycle Management Formats and Protocols

• Access to Subsystems
• HTML Forms for End Users
• Netscape Personal Security Manager
Life-Cycle Management Formats and Protocols
The Registration Manager and Certificate Manager provide default HTML forms
that use different protocols and life-cycle management procedures for different
kinds of end entities. For example, end entities running versions of Communicator
earlier than 4.5 need to be presented with an enrollment form based on the use of
the HTML tag
Explorer require a form containing VBScript
tags, scripts, and protocols result in enrollment messages that are sent back to the
Certificate Manager or Registration Manager in a variety of nonstandard and
standards-based formats.
Table 2-1 summarizes the message formats, cryptographic algorithms, and key
pairs (single or dual) supported by Certificate Management System for the main
categories of end-entity software. Note that, for the purposes of enrollment, CMS
managers are also end entities. CMS managers installed in different instances need
SSL client and SSL server certificates to identify themselves. For more information
about the standards listed in Table 2-1, see "Standards Summary" on page 77.
98 Netscape Certificate Management System Installation and Setup Guide • May 2002
to generate keys. End entities running Microsoft Internet
KEYGEN
commands. These various
XENROLL