Netscape Certificate Management System 6.01, Manual

Page: 54 / 377

Enrollment Forms
54 Netscape Certificate Management System Plug-Ins Guide • May 2002
enrollment for end users requires them to enter information such as name,
email ID, department, organization, and the state and the country in which the
organization is located, and submit the request for a personal certificate.
Manual enrollment for server certificates requires the server administrator to
paste the certificate signing request (in the PKCS#10 format) from the server
into the specified area in the enrollment form; see Chapter 24, “Issuing and
Managing Server Certificates” of CMS Installation and Setup Guide.
Because the Certificate Manager or Registration Manager cannot verify the
information an end user or administrator enters against anything, it builds the
certificate request based on the user input and puts the request in the agent
queue for approval.
• Automated enrollment forms—these forms work with the corresponding
plug-in module, enabling users to request certificates by authenticating to the
configured repository, for example an LDAP directory or NIS directory.
All enrollment forms are accessible from the Enrollment tab of the End Entity
Services interface. Note that by default the Enrollment tab lists only those forms
that are associated with the manual enrollment method (it does not list the forms
provided for the automated-enrollment methods). However, when you create an
instance of any of the authentication modules provided for automated end-user
enrollment—for example, directory-based or NIS-server based authentication—a
link to the corresponding form is automatically created under the Browser section
of the Enrollment tab. Instructions for enabling automated end-user enrollments is
covered in Chapter 15, “Setting Up End-User Authentication” of CMS Installation
and Setup Guide.
Before asking users to use any of the enrollment forms, you should review the form
and make the appropriate changes to the form content. For example, some of the
forms include instructions for administrators and you should delete those lines.
Files for all enrollment forms are located here:
<server_root>/cert-<instance_id>/web-apps/ee
For basic instructions to customize any of the enrollment forms, see section “Step 5.
Set Up the Enrollment Interface” in Chapter 15, “Setting Up End-User
Authentication” of CMS Installation and Setup Guide.
For advanced information on customizing the HTML forms, including how to
make changes to the embedded Javascript functions, see CMS Customization Guide.
Figure 1-10 shows the End Entity Services interface of a Certificate Manager with
the manual enrollment form for end users selected.