Netscape Certificate Management System 6.1, Руководство администратора

Страница: 494 / 840

Configuring Policy Rules for a Subsystem
494 Netscape Certificate Management System Administrator’s Guide • February 2003
on request attributes to prevent conflicting changes. By ordering the rules, you
introduce a concurrency control whereby a higher-priority rule configuration
overwrites any changes made by a lower-priority rule configuration that precedes
it.
You may want to specify policies at different priority levels for the same operation
depending on the end-entity information. For example, authentication policies, if
any, need to precede others in the list.
To reorder policy rules in the CMS configuration:
1.
In the Policy Rules Management tab, click Reorder.
The Reorder Policy Rules window appears. It lists configured policy rules in
the order in which they are executed by the subsystem.
2.
To change the order of a rule, select it in the list and click the Up or Down
button, as appropriate.
Keep in mind that the server executes the rules on a first-come-first-served
basis, overwriting the configuration determined by the previous rule, if any.
3.
When you have the correct order, click OK.
You are returned to the Policy Rules Management tab.
4.
To view the updated configuration, click Refresh.
Testing Policy Configuration
To make sure that you’ve configured the server correctly, request a certificate and
check the certificate for details such as for validity period, key type and size, and
extensions.
1.
Enroll for a Certificate
2.
Approve the Request
3.
Check the Certificate Details
Verify that the certificate contains the required details. Be sure to check the
Extension section to see if it contains all the required extensions.