Enrollment Forms
Chapter
1
Authentication Plug-in Modules
53
General guidelines to set up certificate-based enrollment (for dual certificates) are
as follows:
•
On the server side you need do the following:
❍
Customize the enrollment form you want your users to use for enrollment.
❍
Enable the appropriate enrollment option, such as directory-based
enrollment or NIS-server based enrollment. Be sure to configure the
authentication module to compose the desired DN pattern.
❍
Enable the Key Usage extension policy explained in “KeyUsageExt Plug-in
Module” on page 186.
Take a look at the key-usage policy rule named
ClientCertKeyUsageExt
and see if it needs any modifications. For example, to get a signing-only
certificate, you need to turn off
keyEncipherment
and
dataEncipherment
bits of the extension; similarly, to get an encryption-only certificate, you
may need to turn off the
digitalSignature
bit of the extension.
❍
Configure the
IssuerRule
policy with the correct issuer DN and set the
predicate expression so that the rule is applied to client certificates only.
•
On the client side, you need to do the following:
❍
Install drivers for the hardware tokens you want to use during bulk
generation of key pairs and corresponding certificates with generic subject
names.
❍
If you want to issue dual certificates, install a client that can generate dual
key pairs; for example, Netscape Communicator (version 4.7 or later) with
Netscape Personal Security Manager.
Enrollment Forms
The end-entity interface of the Certificate Manager and the Registration Manager
include default HTML forms for all the authentication methods—manual and
automated—supported by the server.
Enrollment forms can be categorized into two types, depending on the
authentication method they support.
•
Manual enrollment forms—these forms work with the built-in manual
authentication module (see “Manual Authentication” on page 21), enabling
users to request all types of certificates such as client certificates, server
certificates, object-signing certificates, CA certificates, and so on. Manual
Summary of Contents for Certificate Management System 6.01
Page 1: ...Plug Ins Guide Netscape Certificate Management System Version6 01 May 2002...
Page 10: ...10 Netscape Certificate Management System Plug Ins Guide May 2002...
Page 62: ...Enrollment Forms 62 Netscape Certificate Management System Plug Ins Guide May 2002...
Page 308: ...NTEventLog Plug in Module 308 Netscape Certificate Management System Plug Ins Guide May 2002...
