Netscape Certificate Management System 6.2, Руководство администратора

Страница: 34 / 874

Features
34 Netscape Certificate Management System Administrator’s Guide • June 2003
Logging
CMS produces extensive logs that record system events and errors. Logs are
configurable, allowing you to create logs for specific types of events, and for the
logging level you desire. See “Logs,” on page 261 for complete details.
Supports Signing of Logs
CMS allows you to sign log files digitally before archiving them or distributing
them for audit purposes. This feature enables you to check whether the log files
were tampered with after being signed. See “Signing Log Files,” on page 273 for
complete details.
Auditing
CMS can be configured to produce signed audit logs that record auditable events
from the subsystem. The audit log feature is configurable, allowing you to specify
the events that are logged. An auditor user is assigned who is the only user who
can view the audit logs. This user’s certificate is used to sign and encrypt the logs.
See “Signed Audit Log,” on page 275 for complete details.
Self Tests
CMS provides the framework for self-tests of the system that are automatically run
at startup and can be run on demand. It ships with a set of self tests that are
configurable and allows you to create additional self tests using the CMS SDK. See
“Self Tests,” on page 280 for complete details.
Authorization
CMS provides a new authorization framework that allows you to create groups
and assign access control to those groups. You can also change the default access
control for prebuilt groups, and assign access control to individual users and IP
addresses. Access points for authorization have been created for the major portions
of the system allowing you to set access control rules for each of these. You can also
create additional access points and additional access control lists using the CMS
SDK. See Chapter 8, “Authorization” for complete details.