Netscape Certificate Management System 6.2, Administrator'S Manual

Page: 126 / 874

How The Certificate Manager Works
126 Netscape Certificate Management System Administrator’s Guide • June 2003
Customizing the End Entity Interface
CMS provides you with a set of forms that are available at the end entity interface
and are preconfigured for various types of interaction with the end entity. You can
customize this interface by changing which forms are available, and by changing
the forms themselves. You might change the look and feel of the form to fit in with
your intranet, you might change what method of authentication is associated with
a form, and you might change which policies are associated with the form.
Adding Data Recovery Services
You can set up a trusted relationship between a Data Recovery Manager and a
Certificate Manager so that the end-entities’ private encryption keys are archived
during the certificate request. See Chapter 6, “Data Recovery Manager.”
How The Certificate Manager Works
This section provides detailed information on how the Certificate Manager works
during Enrollment, Renewal, Revocation, and Publishing of certificates and CRLs
to help you better understand what configuration you will need to perform for
your PKI.
Enrollment
An end entity can enroll in your PKI by submitting an enrollment request via the
end-entity interface. You can create more than one type of enrollment that either
uses a different enrollment method, has different certificate issuance policies, or
requires a different method of authentication, or all three. You can do this by
creating separate enrollment pages that are specific to the type of enrollment, type
of authentication, and the certificate issuance policies associated with this type of
certificate. The forms associated with enrollment are customizable allowing you to
change the content and the look and feel of the forms. See “Customizing the End
Entity Interface,” on page 126 for information on the default forms. See the Netscape
Certificate Management System Customization Guide for information on customizing
these forms. You can also do this by creating certificate profiles for each with a
dynamically generated form associated with each certificate profile. You customize
the dynamically created certificate profile forms by configuring the inputs
associated with the certificate profile.