Netscape Certificate Management System 6.2, Руководство администратора

Страница: 859 / 874

Glossary 859
server authentication The process of identifying a server to a client. See also
client authentication.
server group The servers in a server root directory managed by a single instance
of Netscape Administration Server.
server root The directory used to store Certificate Management System and other
Netscape Server binaries that make up a server group.
server SSL certificate A certificate used to identify a server to a client using the
Secure Sockets Layer (SSL) protocol.
servlet Java code that handles a particular kind of interaction with end entities
on behalf of a CMS manager. For example, certificate enrollment, renewal,
revocation, and key recovery requests are each handled by separate servlets.
SHA-1 Secure Hash Algorithm, a hash function used by the US Government.
signature algorithm A cryptographic algorithm used to create digital signatures.
Certificate Management System supports the MD5 and SHA-1 signing algorithms.
See also cryptographic algorithm, digital signature.
signed audit log See audit log.
signing certificate A certificate whose public key corresponds to a private key
used to create digital signatures. For example, Certificate Manager must have a
signing certificate whose public key corresponds to the private key it uses to sign
the certificates it issues. A Registration Manager must have a signing certificate
whose public key corresponds to the private key it uses to sign the certificate
requests it sends to the Certificate Manager.
signing key A private key used for signing only. A signing key and its equivalent
public key, plus an encryption key and its equivalent public key, constitute a dual
key pair.
single sign-on 1. In Certificate Management System, a password that simplifies
the way you sign on to Netscape Certificate Management System by storing the
passwords for the internal database and tokens. Each time you log on, you’re
required to enter just this single password. 2. The ability for a user to log in once to
a single computer and be authenticated automatically by a variety of servers within
a network. Partial single sign-on solutions can take many forms, including
mechanisms for automatically tracking passwords used with different servers.