Table of Contents
Advertisement
The following choices are available for synchronizing the directory with the
internal database:
•
Search the internal database for certificates that are out of sync and publish or
unpublish accordingly.
•
Publish certificates that were issued from time A to time B while Directory
Server was down. Similarly, unpublish certificates that were revoked or that
expired while Directory Server was down.
•
Publish or unpublish a range of certificates based on serial numbers (from
serial number
xx
Normally you do not need to manually update the directory with certificate-related
information; if configured properly, the Certificate Manager handles the updates
automatically. However, a situation might arise in which you need to update the
directory manually. For example, Directory Server might be down for a while and
be unable to receive changes from the Certificate Manager. In such a situation, use
the forms provided in the Certificate Manager Agent Services interface to manually
update the directory.
Certificate Manager's publishing directory can be manually updated by a
Certificate Manager agent only.
Manually Updating Certificates in the Directory
The Update Directory Server form in the Certificate Manager Agent Services
interface enables you to manually update the directory with certificate-related
information. This form lets you initiate a combination of the following operations:
•
Update the directory with certificates.
•
Remove expired certificates from the directory.
Note that you can automate removal of expired certificates from the publishing
directory by scheduling an automated job. For details, see Chapter 13,
"Automated Jobs."
•
Remove revoked certificates from the directory.
To manually update the directory with changes:
Go to the Certificate Manager Agent Services interface.
1.
You must submit the proper certificate to get access to this page.
to serial number
).
yy
Updating Certificates and CRLs in a Directory
Chapter 15
Publishing
661
Advertisement
Table of Contents
