Netscape Certificate Management System 6.2, Руководство администратора

Страница: 122 / 874

Configuring the Certificate Manager
122 Netscape Certificate Management System Administrator’s Guide • June 2003
Agent-Approved Enrollment
The Certificate Manager is enabled by default for agent-approved enrollment. The
agent-approved enrollment forms are used to enroll end entities that require
manual approval and whose requests have been sent to the agent services interface
for processing. Agent-approved certificate profile enrollments are also sent to the
agent services interface for processing.
Automated Enrollment
You set up enrollment by configuring instances of the authentication plug-ins. The
plug-ins allow you to set up the kind of authentication you will use for
authentication. All of the authentication plug-ins also enable an automated
enrollment when they are enabled. You can enable one of the authentication
plug-ins, and configure it to be able to authenticate.
Once you have set up an authentication instance, end entities use a form associated
with this method when enrolling. You must provide the necessary fields to collect
the information required for the method of authentication in the form, otherwise
you can customize the form as you like. If you are using the certificate profile
feature, the forms are dynamically generated using the inputs you specify for a
certificate profile.
The authentication methods that you can configure are:
• Directory Based Enrollment. End-entities are authenticated against an LDAP
directory using their user ID or DN and password. See “Setting Up Directory
Based Enrollment,” on page 387.
•
NIS Based Enrollment.
End-entities are authenticated against an NIS server.
See “Setting Up NIS Based Enrollment,” on page 389.
• Pin Based Enrollment. End-entities are authenticated against and LDAP
directory using their user ID, password and a pin given to them. See “Setting
Up Pin Based Enrollment,” on page 393.
• Portal Enrollment. End users are registered into an LDAP directory and issued
a certificate. If user already has an entry in the directory, they are authenticated
against the directory and then issued a certificate. See “Setting Up Portal
Enrollment,” on page 398.
• CMC Auth. This plug-in allows to send agent signed requests and have those
requests processed. See “Setting Up CMC Enrollment,” on page 402.
• Agent Authentication. End-entities are authenticated against the CMS internal
user database. If the end entities have agent certificates, the submitted
certificate requests will be approved immediately.