Configuring the Online Certificate Status Manager
Chapter
5
OCSP Responder
189
❍
Configure the Revocation Info stores. See “Configure the Revocation Info
Stores,” on page 195.
❍
Identify every Certificate Manager that will publish to the OCSP
Responder to the OCSP Responder. “Identifying the CA to the OCSP
Responder,” on page 193 for complete details.
❍
You may need to configure trust settings depending on who signed the
OCSP signing certificate. See “OCSP Certificates,” on page 191 for details.
5.
After configuring both the Certificate Manager and the Online Certificate
Status Manager, restart both.
6.
To verify that the CA is properly connected to the OCSP responder, see “Verify
Certificate Manager and Online Certificate Status Manager Connection,” on
page 194.
Configuring the Online Certificate Status
Manager
This section details the areas that you can configure for the Online Certificate
Status Manager and points you to specific information on configuring those sets of
features.
Adding Users
Once the Online Certificate Status Manager is installed, you need to add users and
assign them to the administrator, agent, and auditor roles. See Chapter 8,
“Authorization” for details on adding users and assigning them to groups.
Configuring Authorization
Each subsystem has a set of predefined groups that are assigned a default set of
privileges. You create users in the CMS database and then assign them to that
group to give them the privileges of that group. The privileges assigned to a role
are controlled by Access Control Instructions (ACIs) placed in Access Control Lists
(ACLs). ACLs define points that need specific authorization. Generally, each
defines a distinct set of functionality for the server. ACIs define what operations
can or cannot be performed by a user, group, or IP address for that particular ACL.
You can change the default ACIs set up in the ACLs to change the privileges. You
Summary of Contents for Certificate Management System 6.1
Page 1: ...Administrator s Guide Netscape Certificate Management System Version6 1 February 2003...
Page 28: ...Documentation 28 Netscape Certificate Management System Administrator s Guide February 2003...
Page 82: ...Uninstalling CMS 82 Netscape Certificate Management System Administrator s Guide February 2003...
Page 382: ...ACL Reference 382 Netscape Certificate Management System Administrator s Guide February 2003...
Page 794: ...Managing Certificates 794 Managing Servers with Netscape Console December 2001...
Page 810: ...The SSL Handshake 810 Managing Servers with Netscape Console December 2001...
Page 828: ...828 Netscape Certificate Management System Administrator s Guide February 2003...