Configuring the Online Certificate Status Manager
190
Netscape Certificate Management System Administrator’s Guide • February 2003
can also create new groups and assign privileges to those groups by adding ACI
entries for that group in the ACLs. For complete details about creating users,
assigning users to groups, creating groups, and changing ACIs and ACLs, see
Chapter 8, “Authorization.”
Default ACL Configuration
The configuration set up for the Online Certificate Status Manager gives the
following privileges to members of the following groups:
•
Administrators can perform any operations in the administrative interface
which includes viewing configuration settings, changing configuration
settings, adding or deleting plug-ins, creating or deleting instances or plug-ins,
viewing all logs except for the signed audit log, if you have the signed audit
feature set up. Administrators do not have any access to the agent services
interface or any task performed there.
•
Auditors can view the signed audit log, and can view configuration settings,
but cannot perform any other operations on configuration settings and do not
have any access to the agent services interface.
•
Online Certificate Status Manager Agents can view configuration settings in
the administrative interface, but cannot perform any other operations on the
configuration settings, they can perform all operations for all tasks associated
with the agent services interface.
•
Trusted Managers all allowed to communicate with the Online Certificate
Status Manager.
Managing Certificates and the Certificate
Database
The signing certificate and SSL encryption certificate are created and installed
during the installation of the Online Certificate Status Manager. See “OCSP
Certificates,” on page 191 for more information about these certificates and the
things you should consider before getting these certificates.
CMS contains a Certificate Wizard that allows you to create additional certificates,
or to renew or replace a certificate for the Online Certificate Status Manager. See
“Certificate Setup Wizard,” on page 298 for details of using the wizard and about
renewing or replacing a subsystem certificate.
Содержание Certificate Management System 6.1
Страница 1: ...Administrator s Guide Netscape Certificate Management System Version6 1 February 2003...
Страница 28: ...Documentation 28 Netscape Certificate Management System Administrator s Guide February 2003...
Страница 68: ...Support for Open Standards 68 Netscape Certificate Management System Administrator s Guide February 2003...
Страница 82: ...Uninstalling CMS 82 Netscape Certificate Management System Administrator s Guide February 2003...
Страница 166: ...How a Registration Manager Works 166 Netscape Certificate Management System Administrator s Guide February 2003...
Страница 382: ...ACL Reference 382 Netscape Certificate Management System Administrator s Guide February 2003...
Страница 566: ...Managing Policy Plug in Modules 566 Netscape Certificate Management System Administrator s Guide February 2003...
Страница 710: ...1 3 Organization Security Policies 710 Netscape Certificate Management System Administrator s Guide February 2003...
Страница 716: ...Object Identifiers 716 Netscape Certificate Management System Administrator s Guide February 2003...
Страница 762: ...DNs in Certificate Management System 762 Netscape Certificate Management System Administrator s Guide February 2003...
Страница 794: ...Managing Certificates 794 Managing Servers with Netscape Console December 2001...
Страница 810: ...The SSL Handshake 810 Managing Servers with Netscape Console December 2001...
Страница 828: ...828 Netscape Certificate Management System Administrator s Guide February 2003...