Deployment Strategy and Port Assignments
180
Netscape Certificate Management System Installation and Setup Guide • March 2002
Thus, a policy for a Certificate Manager might be that all subject names have to end
with
o=Example Corporation
. Registration Managers for individual departments
can enforce this policy and can also define their own, local naming policies, such as
ou=Engineering
.
Another variation is to have the Certificate Manager enforce the companywide
policies and have subordinate Certificate Managers, instead of Registration
Managers, enforce the names for individual departments. Each subordinate
Certificate Manager, in turn, can delegate enrollment responsibilities to multiple
Registration Managers, which can be configured to apply the policies uniformly in
different geographic locations.
For a detailed discussion of policy management, see Chapter 18, “Setting Up
Policies.”
Deployment Strategy and Port Assignments
Before you install any CMS instance, you should review the decisions described in
this chapter and work out the relationships between the Certificate Managers, Data
Recovery Managers, Registration Managers, and Online Certificate Status
Managers you want to deploy for your organization. Once you have decided which
subsystems to install and where, fill out a copy of the worksheet provided in
Chapter 5, “Installation Worksheet” for each separate installation.
You can create multiple instances of Certificate Management System in a single
server root directory, each containing either one or two CMS managers. If you
want to install CMS managers on different hosts, you must run the entire
installation on each host, specifying the services for each instance of Certificate
Management System. You can also perform additional complete installations on
the same host in a different server root directory.
Figure 4-5 shows an example of how several CMS instances can be installed on a
single host machine. (Note that on a Windows NT system, you can install a single
server root only; multiple server roots are not permitted.)
Summary of Contents for NETSCAPE MANAGEMENT SYSTEM 6.0
Page 1: ...Installation and Setup Guide Netscape Certificate Management System Version6 0 March 2002...
Page 22: ...22 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 32: ...32 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 160: ...160 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 776: ...776 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 807: ...807 Part 5 Appendix Appendix A Certificate Download Specification...
Page 808: ...808 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 830: ...830 Netscape Certificate Management System Installation and Setup Guide March 2002...
