Netscape Certificate Management System 6.1, Руководство администратора

Страница: 330 / 840

Setting up Administrators, Agents, and Auditors
330 Netscape Certificate Management System Administrator’s Guide • February 2003
You can configure a Data Recovery Manager to delegate its end-entity
interactions to a trusted Certificate Manager or Registration Manager for
security reasons; the Data Recovery Manager trusts the Certificate Manager or
Registration Manager and services all key archival and recovery requests
initiated by this subsystem.
Trusted Manager’s Certificate for SSL Client Authentication
A Registration Manager or Certificate Manager that has been set up to function as a
trusted manager uses its SSL server certificate for SSL client authentication to the
subsystem that trusts it.
Setting up Administrators, Agents, and Auditors
To set up an administrator, agent, or auditor, you create a user in the CMS instance
where you want to give this user privileges and assign the user to the group having
those privileges. For an agent or auditor, you also need to get a certificate and store
the certificate in the internal database. If you set up the CMS console for SSL client
authentication, you must also import a certificate for all administrators.
Creating a User and Assigning Them to a Group
The following procedure can be used to create any user and assign them to any
group. There is also an automated process for creating an agent. See “Setting up
Agents Using the Automated Process,” on page 332 for information about this
process.
To set up a trusted manager, see “Setting Up a Trusted Manager,” on page 333. The
process for setting up trusted managers varies somewhat from this process.
To create a CMS user and assign them to a group:
1.
Log in to the CMS console, see “Logging Into the CMS Console” on page 247.
2.
In the navigation tree, select Users and Groups. Click Add.
The Edit User Information dialog appears.
3.
Specify the following information in the Edit User Information dialog:
User ID. Type a user ID for the user. The user ID can be an alphanumeric string
of up to 255 characters. This is the user ID used to log into the CMS console.