Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 86 / 866

Some Enrollment Scenarios
86 Netscape Certificate Management System Installation and Setup Guide • October 2001
The sections that follow describe how Acme uses Certificate Management System
to achieve these goals:
• Enrolling Existing Customers
• Enrolling New Customers
• Enrolling Extranet Users
In all cases, Acme has decided to place its Certificate Manager behind the firewall
and its Registration Manager outside the firewall, for reasons summarized in
“Firewall Considerations” on page 84.
Enrolling Existing Customers
Acme has decided on the following process for registering its existing customers,
as shown in Figure 2-2.
1.
Request certificate. The customer fills in and submits a form (over SSL) that
specifies account information and other personal details stored in the existing
customer database.
2.
Custom authentication. The Registration Manager uses a custom
authentication module to verify the customer’s account and status against the
existing customer database.
3.
Request certificate. If authentication against the customer database is
successful, the Registration Manager performs policy processing and, if
processing is successful, forwards the request to the Certificate Manager.
4.
Issue certificate. The Certificate Manager performs its own policy processing
and, if processing is successful, issues the certificate and delivers it to the
Registration Manager.
5.
Deliver certificate. If the Certificate Manager successfully issues the certificate,
the Registration Manager delivers it to the end user in the same session. If the
request is unsuccessful for any reason, the Registration Manager displays a
web page to the customer explaining the problem and what to do about it.