Renewal; Revocation - Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual

How The Certificate Manager Works
• You can send an automated certificate issuance notification to the end entity
when the certificate is issued. You can also send an automated certificate
rejected notification if the request was rejected.
• The certificate that was issued is stored in the internal database of the
Certificate Manager.
• You can set up publishing for the Certificate Manager and publish the
certificate either to a file and an LDAP directory.
• You can set up the internal OCSP service, which checks the status of certificates
in the internal database when a certificate status request is received.
• The end-entity interface provides forms that allow for searches of certificates
that have been issued and for the CA certificate chain.

Renewal

The Certificate Manager allows for the renewal of certificates. Certificates can be
renewed if the policies associated with renewal are enabled and if the request
meets the criteria of those policies. The Certificate Manager is set up for a single
method of renewal. All requests are made to the renewal page of the end-entity
interface. The end entity presents their old certificate, and if they meet the policies
for renewal, a new certificate is issued with the validity period set up in the
renewal policies.
Whether you set up renewals as renewals, or have end entities renew certificates as
an enrollment request, you can set up automated notifications that will send an
email to users at some period before their certificate expires for a predefined
interval of time. You set this up by enabling the jobs feature, enabling and
configuring Certificate Renewal job, and customizing the certificate renewal email
template.

Revocation

An end entity can request that their own certificate is revoked.
126 Netscape Certificate Management System Administrator's Guide • February 2003
If the notification feature is setup, the link, where certificate can be
obtained, will be sent to the end user.