Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 606 / 866

Publishing of Certificates to a Directory
606 Netscape Certificate Management System Installation and Setup Guide • October 2001
information to that directory. For example, if you have configured the Certificate
Management System to employ directory-based authentication, you should
consider publishing the CA and end-entity certificates to the same directory. This
way, you can keep your users’ security credentials with the rest of the user
information (see Figure 19-1).
Figure 19-1 Publishing certificates to a directory for distribution
Note that configuring the Certificate Manager for LDAP publishing is
optional—you can turn this feature off without affecting any of the certificate
issuance, renewal, and revocation operations handled by the server.
You can configure the Certificate Manager to automatically publish certificates to
the directory every time a certificate is issued and at a predetermined interval—for
example, every day or once every week. Privileged users (administrators and
agents) can also manually initiate the LDAP publishing process.
Figure 19-2 illustrates LDAP publishing by the Certificate Manager when a
certificate requested via the manual-enrollment process is issued.