Netscape Certificate Management System 6.1, Руководство администратора

Страница: 604 / 840

Setting Up the Issuance of CRLs
604 Netscape Certificate Management System Administrator’s Guide • February 2003
7.
Setting up publishing of CRLs to files, and LDAP directory, or to an OCSP
responder. See Chapter 15, “Publishing” for complete details about setting up
publishing.
Configuring Issuing Points
You can create Issuing Points that define which certificates are included in new a
CRL that is generated. A Master CRL issuing point has already been created for a
master CRL containing a list of all revoked certificates for this Certificate Manager.
To create a new Issuing Point:
1.
Log into the CMS console.
2.
Select Certificate Manager, and then CRL Issuing Points.
3.
To delete an issuing point, select that issuing point and click Delete.
To edit an issuing point, select that issuing point and click Edit. You can only
change the description for the issuing point, and change the status from
enabled to disabled.
4.
To add an issuing point, click Add.
The CRL Issuing Point Editor window appears.
You may want to expand this window by dragging at one of the corners, some
fields in this window do not appear large enough to read the content.
5.
Create the Issuing Point by specifying the following fields:
Enable. Select to enable this Issuing Point; deselect to disable.
CRL Issuing Point name.
Provide a name for this issuing point, spaces are not
allowed.
Description. Type a description for this Issuing Point.
6.
Click OK.
7.
In order to view and configure this issuing point, you need to close the CMS
console and log back into it. When you log back in, the new issuing point will
appear below the CRL Issuing Points entry in the navigation tree.
All the CRLs you created will appear on the Update Revocation List page of
the Agent Services pages.