Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 544 / 866

Managing Authentication Instances
544 Netscape Certificate Management System Installation and Setup Guide • October 2001
Step 9. Deliver PINs to End Users
This step is applicable for directory- and PIN-based authentication with or without
PIN removal.
After you have confirmed that the PIN-based enrollment works (as it should),
deliver the PINs to users so they can use them during enrollment. To protect the
privacy of PINs, be sure to use a secure, out-of-band method for delivery. Here are
a few suggested delivery methods:
• Encrypted email (S/MIME)—if your company has S/MIME mail set up, you
can deliver PINs to users by encrypted mail.
• Mail—you can mail PINs to users, for example along with their pay stubs or
slips.
• Personal delivery—you can arrange a secure means of delivering the password
to the user, or ask the user to collect it from you in person.
Managing Authentication Instances
This section explains how to use the CMS window to do the following:
• Configuring Authentication for End-User Enrollment
• Deleting an Authentication Instance
• Modifying an Authentication Instance
For information on adding or changing authentication-specific information in the
configuration file, see “Changing the Configuration by Editing the Configuration
File” on page 349.
Deleting an Authentication Instance
You can delete an authentication instance that you no longer need from the CMS
configuration. If you delete an authentication instance, end users will fail to enroll
for certificates using the associated enrollment form. If you want the form to work
with another authentication instance, you must make the appropriate changes to
the form; see “Step 5. Set Up the Enrollment Interface” on page 534.