Setting up CEP Enrollment Manually
Chapter
25
Setting Up CEP Enrollment
795
Step 3. Set Up Automated Enrollment
As a part of enrolling for a certificate (via CEP), a router administrator or
VPN-client user needs to start the enrollment process, which in turn asks the user
for information such as the following:
•
The CA’s identity
•
The CEP enrollment URL
•
A challenge password
•
The serial number and IP address
Some of the information a user enters, such as the serial number and IP address,
goes in to the subject name in the CEP request. Information such as the CA’s
identity and enrollment URL enables the router to connect to the valid CA to make
the certificate request. The challenge password, if specified, enables the user to
authenticate to the server during enrollment and to revoke the certificate, if
needed, by presenting the same password again. (See “Certificate Issuance to
Routers or VPN Clients” on page 800.)
You can configure the Certificate Manager to use either the challenge password or
the subject name (all or a part of it) as an authentication token during a CEP
enrollment, thus enabling users to get router certificates without any action on the
part of the Certificate Manager agent.
To aid you in implementing the automated CEP enrollment process, Certificate
Management System comes with an authentication plug-in module named
FlatFileAuth
. This plug-in is available in source-code form in the CMS samples
package in this directory:
<server_root>/cms_sdk/cms_jdk/samples/authentication
In order for the Certificate Manager to recognize the
FlatFileAuth
plug-in and
use it for authenticating CEP-based certificate requests, you must do the following:
•
Register the plugin in the CMS authentication framework; for instructions, see
“Registering an Authentication Module”.
•
Create an instance of the plug-in; for instructions, see “Step 4: Add an
Authentication Instance” on page 509.
You can do this either via the CMS window or by adding the required parameters
to the Certificate Manager’s configuration file (
CMS.cfg
). The configuration
parameters of the
FlatFileAuth
plug-in are listed below.
Summary of Contents for NETSCAPE MANAGEMENT SYSTEM 6.0
Page 1: ...Installation and Setup Guide Netscape Certificate Management System Version6 0 March 2002...
Page 22: ...22 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 32: ...32 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 160: ...160 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 776: ...776 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 807: ...807 Part 5 Appendix Appendix A Certificate Download Specification...
Page 808: ...808 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 830: ...830 Netscape Certificate Management System Installation and Setup Guide March 2002...
