Netscape Certificate Management System 6.1, Руководство администратора

Страница: 116 / 840

Configuring the Certificate Manager
116 Netscape Certificate Management System Administrator’s Guide • February 2003
Changing Subsystem Security Setting
You can configure the security of each subsystem by changing the SSL version used
by the subsystem and enabling or disabling ciphers, see “Configuring the Server’s
Security Preferences,” on page 320.
Changing Passwords or Storage Settings
Each subsystem stores passwords for its internal database, and for the tokens
containing its keys and certificates. See “System Passwords,” on page 252 for
information on how these passwords are stored.
Configuring Logs
Each subsystem creates a number of logs that detail various events and errors. Each
subsystem also has the ability to create signed audit logs that create audit trails that
can only be read by a user with auditor privileges. The log feature is configurable
allowing you to change the settings for some of the logs. See “Logs,” on page 263
for complete information about the logs and details of the configuration options for
logs.
Changing Internal Database Settings
You can change the configuration of the internal database after installation
including restricting access to the internal database, see “The Internal Database,”
on page 290 for information on doing this, and for information about viewing the
internal database.
If the password changes for the user ID CMS uses to bind to this database, you
need to update the password in the password cache. See “System Passwords,” on
page 252.
Configuring Self Test
Each subsystem provides self tests that are run on start up and can also be run on
demand. This feature is configurable, see “Self Tests,” on page 282 for complete
information.