Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual page 213

In the New Scheme section, make the appropriate changes:
5.
Number of recovery agents required. Type the number of agents required to
authorize a key recovery process. The number cannot be zero and must be
equal to or less than the total number of recovery agents.
Total number of recovery agents. Specify the total number of key recovery
agents. The number cannot be less than one and must be equal to or greater
than the number of agents required to authorize the key recovery operation.
Click Next.
6.
For each agent, enter a user name and password, then click Next.
7.
The number of screens depends on the total number of agents you have
specified.
When you have entered all agent information, click Done.
8.
You are returned to the Scheme Management tab.
Changing Key Recovery Agents' Passwords
As administrator, you have the responsibility of safeguarding the security of each
Data Recovery Manager installed in your PKI setup. One of the safety measures
you can implement is to ask your key recovery agents to change their passwords
periodically. This way, you will be sure that the required number of agents are
available if a key needs to be recovered. If key recovery agents routinely change
their passwords, they are less likely to forget them.
The CMS window allows you to view the list of currently designated key recover
agents and, if necessary, change an agent's password.
To change key recovery agents' passwords:
Access the CMS window (see "Logging Into the CMS Console" on page 247).
1.
Click the Configuration tab.
2.
In the navigation tree, select the Data Recovery Manager, and in the right pane,
3.
click the Recovery Agent Password tab.
Key Recovery Process
Chapter 6 Data Recovery Manager 213