Table of Contents
Advertisement
Changing Internal Database Settings
You can change the configuration of the internal database after installation
including restricting access to the internal database, see "The Internal Database,"
on page 288 for information on doing this, and for information about viewing the
internal database.
If the password changes for the user ID CMS uses to bind to this database, you
need to update the password in the password cache. See "System Passwords," on
page 250.
Configuring Self Test
Each subsystem provides self tests that are run on start up and can also be run on
demand. This feature is configurable, see "Self Tests," on page 280 for complete
information.
Setting Up Jobs
The jobs feature that allows you to send automated jobs is disabled after
installation. The Online Certificate Status Manager contains the framework for
jobs, but does not contain any prebuilt jobs. You can build jobs using the CMS SDK.
For detailed information on setting up publishing, see Chapter 13, "Automated
Jobs."
Identifying the CA to the OCSP Responder
Before you configure a Certificate Manager to publish CRLs to the Online
Certificate Status Manager, you must identify the Certificate Manager to the Online
Certificate Status Manager. You do this by storing the Certificate Manager's CA
signing certificate in the internal database of the Online Certificate Status Manager.
The Certificate Manager signs CRLs with the key pair associated with this
certificate; the Online Certificate Status Manager verifies the signature against the
stored certificate.
Get the Certificate Manager's CA signing certificate in base 64 encoded format.
1.
You should be able to get this from the end-entity interface of the CA that
issued the certificate, or the end-entity interface of the Certificate Manager if
the certificate is self-signed.
Configuring the Online Certificate Status Manager
Chapter 5
OCSP Responder
191
Advertisement
Table of Contents
