Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 102 / 866

End Entities and Life-Cycle Management
102 Netscape Certificate Management System Installation and Setup Guide • October 2001
Table 2-2 shows the protocols supported by the default CMS life-cycle
management servlets. Any of the HTML forms and their HTML help text can be
customized. The Registration Manager also supports the creation of new forms.
Some output templates can also be customized.
For more information about the standards listed in Table 2-1, see “Standards
Summary” on page 77.
Netscape Personal Security Manager
Netscape Personal Security Manager is a standards-based, client-independent
application that performs PKI operations on behalf of Netscape Communicator 4.7
and other applications. Personal Security Manager provides advanced
cryptographic capabilities while at the same time hiding the complexity of PKI
operations from end users. In particular, Personal Security Manager simplifies
certificate deployment with Certificate Management System by taking advantage
of the following CMS features:
• One-click issuance of certificates.
• Forced certificate backup by end users after certificate issuance.
• Issuance and management of separate signing and encryption certificates.
Table 2-2 Default CMS life-cycle management servlets and supported protocols
Life-cycle management servlet Message syntax/procedures for end entities
Certificate enrollment form User certificates:
KEYGEN
for
Navigator/Communicator, VBScript/
XENROLL
and
PKCS #10 for Internet Explorer
Server certificates: PKCS #10 (cut and paste; also
URI for Netscape Administration Server 3.5 and 4.x)
Certificate renewal form User certificates: SSL client authentication
Server certificates: PKCS #10 (cut and paste)
Certificate revocation form User certificates: SSL client authentication
Server certificates: agent initiated
Encryption key storage and
recovery form Not supported for Navigator/Communicator 4.x;
CRMF for Netscape 6 (based on new JavaScript
API).