Netscape Certificate Management System 6.2, Руководство администратора

Страница: 190 / 874

Configuring the Online Certificate Status Manager
190 Netscape Certificate Management System Administrator’s Guide • June 2003
Changing Ports and IP Addresses
You set up the ports for each of the interfaces when you install the Online
Certificate Status Manager. You can change the ports that any of the interfaces
listen on, and you can disable the HTTP (non-SSL) end-entity port if you will not
use it. For information on changing ports, see “Ports,” on page 283. For information
about the ports that are setup with an Online Certificate Status Manager, see
“Interfaces,” on page 172.
You can also change the IP address for the CMS instance. You might do this if you
have more than one IP address set up on your machine and want separate
instances of CMS to use different IP addresses. You can do this during or after
installation. See “Changing an IP Addresses,” on page 287 for details.
Changing Subsystem Security Setting
You can configure the security of each subsystem by changing the SSL version used
by the subsystem and enabling or disabling ciphers, see “Configuring the Server’s
Security Preferences,” on page 318.
Changing Passwords or Storage Settings
Each subsystem stores passwords for its internal database, and for the tokens
containing its keys and certificates. See “System Passwords,” on page 250 for
information on how these passwords are stored.
Configuring Logs
Each subsystem creates a number of logs that detail various events and errors. Each
subsystem also has the ability to create signed audit logs that create audit trails that
can only be read by a user with auditor privileges. The log feature is configurable
allowing you to change the settings for some of the logs. See “Logs,” on page 261
for complete information about the logs and details of the configuration options for
logs.