Netscape Certificate Management System 6.1, Administrator'S Manual

Page: 694 / 840

Understanding Subsystem Setup
694 Netscape Certificate Management System Administrator’s Guide • February 2003
Certificate Policies
The non-profiles policy feature is not part of the Common Criteria Environment.
All enrollments are set up using the certificate profiles feature.
Authentication
In the Common Criteria Environment, you can enable and configure the
agent-approved authentication method or any of the authentication plug-ins in
conjunction with a certificate profile. You cannot set up certificate-based
enrollment or in-person enrollment. See Chapter 9, “Authentication” for complete
information about authentication. See the Chapter 10, “Certificate Profiles” for
information about using authentication with certificate profiles.
CRLs
In a CA subsystem, you can set up the CRL feature and any of the three issuing
points for CRLs under the Common Criteria Environment. When setting up the
CRL feature, you cannot set up a CRL that does not have an update frequency
specified in the “Update at this frequency” field. Compliant CRLs must contain the
nextUpdateTime
extension, which will not be filled in correctly if an update
frequency is not specified. Note that you can specify an update frequency and also
specify that the CRL is updated every time a certificate is revoked; both settings
will be respected. For complete information on CRLs, see Chapter 14, “Revocation
and CRLs.”
Jobs
Jobs are events that can be scheduled to be activated periodically. You can set up
any of the available job plug-ins in the Common Criteria Environment. Any custom
plug-ins for any of the Jobs feature are not part of the Common Criteria
Environment, however. Although you will not specifically be instructed to
configure Jobs, you can turn on and configure any jobs that are provided by
default. If you want notifications to be sent, be cautious on the email addresses you
provide and make sure they belong to appropriate roles. For complete information
on jobs, see Chapter 13, “Automated Jobs.”