Table of Contents
Advertisement
ACL Reference
Operations
read
modify
Default ACIs
allow (read) group="Administrators" || group="Certificate Manager
Agents" || group="Registration Manager Agents" || group="Data
Recovery Manager Agents" || group="Online Certificate Status Manager
Agents" || group="Auditors"
allow (modify) group="Administrators"
Administrators, auditors, and agents are allowed to read RA configuration; only
administrators are allowed to modify RA configuration.
certServer.ra.certificate
Allow or deny an import, unrevoke, revoke, or read operation concerning
certificates in the agent services interface of a Registration Manager.
Operations
import
unrevoke
revoke
read
Default ACIs
allow (import,unrevoke,revoke,read) group="Registration Manager
Agents"
Registration Manager agents can import, unrevoke, revoke, and read certificates.
certServer.ra.connector
Allow or deny a submit operation for a connection to the RA.
374
Netscape Certificate Management System Administrator's Guide • June 2003
Viewing general RA configuration, connector configuration,
notification request completion, notification revocation completion,
and notification request in queue.
Modifying general RA configuration, connector configuration,
notification request completion, notification revocation completion,
and notification request in queue.
Retrieving a certificate by serial number.
Removing the revoked status from a certificate.
Revoking certificates, or approving certificate revocation requests.
Retrieving certificates based on associated request ID. Displaying
certificate details for a certificate, based on associated request ID
Advertisement
Table of Contents
