Setting Up Signed Audit Logs - Netscape MANAGEMENT SYSTEM 6.2 - ADMINISTRATOR Administrator's Manual

Signed Audit Log
Table 7-3
Logging Event
AUTH_FAIL
AUTH_SUCCESS
CERT_PROFILE_APPROVAL
PROOF_OF_POSSESSION
CRL_RETRIEVAL
CRL_VALIDATION
CMC_SIGNED_REQUEST_SIG_VER
IFY
AUDIT_LOG_SIGNING

Setting Up Signed Audit Logs

To set up signed audit logs:
Set up the certificate profiles
1.
Certificate Profiles," on page 432 for information about setting up certificate
profiles. See Chapter 10, "Certificate Profiles" for general information about
certificate profiles.
Approve the
2.
them in the agent services interface, thus enabling them.
If the request for this certificate is received in the end-entity interface of a
Certificate Manager, enable the
Manager.
If the request for this certificate is received in the end-entity interface of a
Registration Manager, enable the
Manager and enable the
processes the requests of that Registration Manager.
278 Netscape Certificate Management System Administrator's Guide • June 2003
Signed-Audit Log Events
and
caAuditCert
raAuditCert
Type of Log Messages are Generated
CMS
A user does not successfully authenticate.
CMS
A user does successfully authenticate.
A certificate profile sent by an administrator is
approved by an agent.
When proof of possession is checked during
certificate enrollment.
When a CRL is retrieved by the OCSP Responder
When a CRL is retrieved and validation process
occurs.
Used when CMC (agent-pre-signed) cert requests
or revocation requests are submitted and signature
is verified.
The audit buffer is signed and flushed to disk.
and
caAuditCert raAuditCert
certificate profiles by approving
raAuditCert
profile in that Certificate
caAuditCert
profile in that Registration
raAuditCert
profile in that Certified Manager that
. See "Setting Up