Certserver.ca.certificates; Certserver.ca.configuration - Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual

certServer.ca.certificates

Allow or deny a revoke or list operation to certificates in the agent services
interface.
Operations
revoke Revoking certificates, or approving certificate revocation requests.
list Listing certificates based on a search. Retrieving details about a
range of certificates based on providing a range of serial numbers.
Default ACIs
allow (revoke,list) group="Certificate Manager Agents"
Only Certificate Manager Agents can revoke or list certificates.

certServer.ca.configuration

Allow or deny a read or modify operation to the general configuration for a
Certificate Manager.
Operations
read Viewing CRL plug-in information, general CA configuration, CA
connector configuration, CRL Issuing Points configuration, CRL
configuration, request notification completion configuration,
revocation notification completion configuration, request in queue
notification configuration, and CRL extensions configuration.
Listing CRL extensions configuration and CRL Issuing Points
configuration.
modify Adding and deleting CRL Issuing Points. Modifying general CA
settings, CA connector configuration, CRL Issuing Points
configuration, CRL configuration, request notification completion
configuration, revocation notification completion configuration,
request in queue notification configuration, and CRL extensions
configuration.
Default ACIs
allow (read) group="Administrators" || group="Certificate Manager
Agents" || group="Registration Manager Agents" || group="Data
Recovery Manager Agents" || group="Online Certificate Status Manager
Agents" || group="Auditors"
ACL Reference
Chapter 8 Authorization 355