Table of Contents
Advertisement
Configuring the Online Certificate Status Manager
can also create new groups and assign privileges to those groups by adding ACI
entries for that group in the ACLs. For complete details about creating users,
assigning users to groups, creating groups, and changing ACIs and ACLs, see
Chapter 8, "Authorization."
Default ACL Configuration
The configuration set up for the Online Certificate Status Manager gives the
following privileges to members of the following groups:
•
Administrators can perform any operations in the administrative interface
which includes viewing configuration settings, changing configuration
settings, adding or deleting plug-ins, creating or deleting instances or plug-ins,
viewing all logs except for the signed audit log, if you have the signed audit
feature set up. Administrators do not have any access to the agent services
interface or any task performed there.
•
Auditors can view the signed audit log, and can view configuration settings,
but cannot perform any other operations on configuration settings and do not
have any access to the agent services interface.
•
Online Certificate Status Manager Agents can view configuration settings in
the administrative interface, but cannot perform any other operations on the
configuration settings, they can perform all operations for all tasks associated
with the agent services interface.
•
Trusted Managers all allowed to communicate with the Online Certificate
Status Manager.
Managing Certificates and the Certificate
Database
The signing certificate and SSL encryption certificate are created and installed
during the installation of the Online Certificate Status Manager. See "OCSP
Certificates," on page 189 for more information about these certificates and the
things you should consider before getting these certificates.
CMS contains a Certificate Wizard that allows you to create additional certificates,
or to renew or replace a certificate for the Online Certificate Status Manager. See
"Certificate Setup Wizard," on page 296 for details of using the wizard and about
renewing or replacing a subsystem certificate.
188
Netscape Certificate Management System Administrator's Guide • June 2003
Advertisement
Table of Contents
