Netscape Certificate Management System 6.1, Administrator'S Manual

Page: 137 / 840

Registration Manager Deployment Considerations
Chapter 4 Registration Manager 137
Registration Manager Interfaces
When you install a Registration Manager, three interfaces are enabled. The
installation wizard lets you choose the ports these interfaces listen on. The
following interfaces, and associated ports will be created:
• An Administrative interface that is accessible by default only to members of
the Administrator and Auditor group. Administrators can configure any of the
settings of the server. Most basic functionality and subsystem specific
configuration to the subsystem can be done using the administrative interface.
The administrative interface listens to requests on the SSL Administration Port.
This is the port the CMS administrative interface listens to, and that is accessed
by administrators and auditors using the Java based CMS Console GUI
application.
• An Agent Services interface that is accessible by default only to members of the
Registration Manager Agent group. Agents are users who can perform tasks
associated with the processing of requests and management of certificates. A
Registration Manager Agent can change the status, change the details, reject or
approve certificate requests and configure certificate profiles. The agent’s
services interface is an HTML interface accessible through HTTPS that
authenticates agents using their certificates. The default interface provides all
the functionality needed by agents for a Registration Manager and is
completely customizable.
The agent services interface listens to requests and communicates on the SSL
Agent Services Port. This is the port that the agent goes to in order to access the
agent services interface. The agent services interface is accessible at the
following location:
https://<cms_host_dnsname>:<port_number>
For example:
https://services.example.com:7878