Netscape MANAGEMENT SYSTEM 6.2 - ADMINISTRATOR Administrator's Manual page 54

Deployment Scenarios
Figure 1-2
Many organizations need to separate the role of the Registration Manager from the
role of the Certificate Manager. This separation can be useful, for example, if
different groups of end entities are subject to different authentication policies or
work in different geographic locations.
Each group of end entities interacts with a designated Registration Manager that
processes requests from end entities and sends them to a Certificate Manager. The
Certificate Manager can accept requests from both end entities and Registration
Managers. For example, end entities at the home office might deal directly with the
Certificate Manager, while end entities at a branch office might deal with their own
Registration Manager. Alternatively, the Certificate Manager might be configured
to accept requests only from Registration Managers, thus shielding the CA from
end entities.
54 Netscape Certificate Management System Administrator's Guide • June 2003
Certificate Manager
and Registration Manager in different instances