Netscape Certificate Management System 6.1, Administrator'S Manual

Page: 596 / 840

CMCRevocation
596 Netscape Certificate Management System Administrator’s Guide • February 2003
If you want to change the forms to suit your organization’s requirements, you can
edit the following files:
•
ChallengeRevoke1.html
(the form that allows challenge password based
revocation of client or personal certificates)
•
UserRevocation.html
(the form that allows SSL client authenticated
revocation of client or personal certificates)
Both the files are located in the following directory:
<server_root>/cert-<instance_id>/web-apps/ee/<subsystem>/
For details on individual form elements, see the online help available by clicking
the Help button on the form. For more information on customizing the form, see
CMS Customization Guide.
CMCRevocation
CMC revoke allows you to set up your own revocation client, sign the revocation
request with an agent certificate, and then send the signed request to the Certificate
Manager. The enabled instance of the
CMCAuth
plug-in module also activates CMC
revoke when it is enabled (the default). When this method is setup, the Certificate
Manager will automatically issue certificates when a valid certificate request
signed with the agent’s certificate is received, and will automatically revoke a
certificate when a valid revocation request signed with the agent’s certificate is
received.
Setting Up CMC Revocation
To set up CMC revoke you do the following:
• Set up an instance of the
CMCAuth
Authentication plug-in module. An instance
is enabled and configured by default. See “Setting Up CMC Enrollment,” on
page 404 for details on setting up this plug-in.
• Use your agent certificate to sign revocation requests. See “CMC Revoke
Utility,” on page 596 for information on signing requests.
CMC Revoke Utility
The CMC Revoke utility,
CMCRevoke
, is used to sign a revocation request with an
agent’s certificate. It is installed along with CMS and is available from the
following directory: