Certificate Policies; Authentication; Crls; Jobs - Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual

Understanding Subsystem Setup

Certificate Policies

The non-profiles policy feature is not part of the Common Criteria Environment.
All enrollments are set up using the certificate profiles feature.

Authentication

In the Common Criteria Environment, you can enable and configure the
agent-approved authentication method or any of the authentication plug-ins in
conjunction with a certificate profile. You cannot set up certificate-based
enrollment or in-person enrollment. See Chapter 9, "Authentication" for complete
information about authentication. See the Chapter 10, "Certificate Profiles" for
information about using authentication with certificate profiles.

CRLs

In a CA subsystem, you can set up the CRL feature and any of the three issuing
points for CRLs under the Common Criteria Environment. When setting up the
CRL feature, you cannot set up a CRL that does not have an update frequency
specified in the "Update at this frequency" field. Compliant CRLs must contain the
nextUpdateTime
frequency is not specified. Note that you can specify an update frequency and also
specify that the CRL is updated every time a certificate is revoked; both settings
will be respected. For complete information on CRLs, see Chapter 14, "Revocation
and CRLs."

Jobs

Jobs are events that can be scheduled to be activated periodically. You can set up
any of the available job plug-ins in the Common Criteria Environment. Any custom
plug-ins for any of the Jobs feature are not part of the Common Criteria
Environment, however. Although you will not specifically be instructed to
configure Jobs, you can turn on and configure any jobs that are provided by
default. If you want notifications to be sent, be cautious on the email addresses you
provide and make sure they belong to appropriate roles. For complete information
on jobs, see Chapter 13, "Automated Jobs."
694 Netscape Certificate Management System Administrator's Guide • February 2003
extension, which will not be filled in correctly if an update