Road Map to Configuring Subsystems
Chapter
10
CMS Configuration
357
Step 8. Schedule Jobs
Each CMS instance includes a Job Scheduler component that can execute specific
jobs at specified times. The Job Scheduler functions similar to a traditional Unix
cron daemon in that it takes registered cron jobs and executes them at a
preconfigured date and time.
During installation, a few jobs are already created and enabled. Jobs that you might
want to schedule include email notifications of timed events (such as the expiration
of a certificate) that require action on the part of users, and periodic activities such
as removing expired certificates from the publishing directory. For scheduling jobs,
follow the instructions in “Configuring a Subsystem to Run Automated Jobs” on
page 545.
Step 9. Set up Policies
Each subsystem has its own policy processor and you should apply the
instructions in this section to each subsystem. That is, you should configure the
Certificate Manager and Registration Manager for certificate formulation, issuance,
renewal, and revocation policies. To understand policy, see “Introduction to
Policy” on page 559.
1.
During installation, a few policy rules are already created and enabled. Check
each policy rule and decide whether you want to use it. If you don’t, you can
either disable it or delete it altogether from the configuration. For those rules
that you want to use, check the configuration parameter values and make
changes as appropriate.
2.
Determine if you want to add any new policy rules. Check the built-in policy
plug-in modules to see if they can be used to create the rules you want. You can
also plug-in your own modules in the CMS framework and use them.
3.
Add new rules, if required.
For instructions to do all of the above tasks, see “Configuring Policy Rules for a
Subsystem” on page 569.
Step 10. Set up Publishing
This step is optional, and is applicable to the Certificate Manager only—you need
to do this only if you want the Certificate Manager to publish certificates and CRLs
to any of the supported repositories.
•
To configure a Certificate Manager to publish certificates and CRLs to an
LDAP-compliant directory, such as Netscape Directory Server, see
“Configuring a Certificate Manager to Publish Certificates and CRLs” on
page 595.
Summary of Contents for NETSCAPE DIRECTORY SERVER 6.01
Page 1: ...Installation and Setup Guide Netscape Certificate Management System Version6 01 May 2002...
Page 22: ...22 Netscape Certificate Management System Installation and Setup Guide May 2002...
Page 32: ...32 Netscape Certificate Management System Installation and Setup Guide May 2002...
Page 160: ...160 Netscape Certificate Management System Installation and Setup Guide May 2002...
Page 776: ...776 Netscape Certificate Management System Installation and Setup Guide May 2002...
Page 807: ...807 Part 5 Appendix Appendix A Certificate Download Specification...
Page 808: ...808 Netscape Certificate Management System Installation and Setup Guide May 2002...
Page 830: ...830 Netscape Certificate Management System Installation and Setup Guide May 2002...
