Netscape Certificate Management System 6.1, Руководство администратора

Страница: 815 / 840

Glossary 815
Certificate Manager An independent CMS subsystem capable of acting as a
stand-alone certificate authority. A Certificate Manager instance issues, renews,
and revokes certificates, which it can publish along with CRLs to an LDAP
directory. It can be configured to accept requests from end entities, Registration
Managers, or both. When set up to work with a separate Registration Manager, the
Certificate Manager processes requests and returns the signed certificates to the
Registration Manager. See certificate authority (CA).
Certificate Manager agent A user who belongs to a group authorized to manage
agent services for a Certificate Manager. These services include the ability to access
and modify (approve and reject) certificate requests and issue certificates.
certificate profile A set of configuration settings that defines a certain type of
enrollment. The certificate profile feature replaces the policy functionality by
allowing you to set up policies for a particular type of enrollment along with an
authentication method in a certificate profile.
Certificate Request Message Format (CRMF) Format used for messages related
to life-cycle management of X.509 certificates. This format is a subset of CMMF. See
also Certificate Management Message Formats (CMMF). For detailed information,
see
ftp://ftp.isi.edu/in-notes/rfc2511.txt
.
certificate revocation list (CRL) As defined by the X.509 standard, a list of
revoked certificates by serial number, generated and signed by a certificate
authority (CA).
chain of trust See certificate chain.
chained CA See linked CA.
cipher
See cryptographic algorithm.
client authentication The process of identifying a client to a server, for example,
with a name and password or with a certificate and some digitally signed data. See
certificate-based authentication, password-based authentication, server
authentication.
client SSL certificate A certificate used to identify a client to a server using the
SSL protocol. See Secure Sockets Layer (SSL).
CMC See Certificate Management Messages over Cryptographic Message Syntax
(CMC).