Netscape Certificate Management System 6.1, Руководство администратора

Страница: 52 / 840

Deployment Scenarios
52 Netscape Certificate Management System Administrator’s Guide • February 2003
Figure 1-2
Certificate Manager
and Registration Manager in different instances
Many organizations need to separate the role of the Registration Manager from the
role of the Certificate Manager. This separation can be useful, for example, if
different groups of end entities are subject to different authentication policies or
work in different geographic locations.
Each group of end entities interacts with a designated Registration Manager that
processes requests from end entities and sends them to a Certificate Manager. The
Certificate Manager can accept requests from both end entities and Registration
Managers. For example, end entities at the home office might deal directly with the
Certificate Manager, while end entities at a branch office might deal with their own
Registration Manager. Alternatively, the Certificate Manager might be configured
to accept requests only from Registration Managers, thus shielding the CA from
end entities.