Road Map to Configuring Subsystems368 Netscape Certificate Management System Installation and Setup Guide • October 2001Step 7: Enable Event-Driven NotificationsYou can also configure both Certificate Manager and Registration Manager to sendemail notifications automatically to end entities, agents, or administrators whencertain events occur. Unlike jobs that are executed at preconfigured schedule, thesenotifications are event-driven—that is, whenever an event occurs, the servernotifies the user. Notifiable events include certificate issuance and pendingrequests in an agent queue.Decide if you want to turn on any of the notifications. For details, see “Configuringa Subsytem to Send Notifications” on page 559.Step 8. Schedule JobsEach CMS instance includes a Job Scheduler component that can execute specificjobs at specified times. The Job Scheduler functions similar to a traditional Unixcron daemon in that it takes registered cron jobs and executes them at apreconfigured date and time.During installation, a few jobs are already created and enabled. Jobs that you mightwant to schedule include email notifications of timed events (such as the expirationof a certificate) that require action on the part of users, and periodic activities suchas removing expired certificates from the publishing directory. For scheduling jobs,follow the instructions in “Configuring a Subsystem to Run Automated Jobs” onpage 565.Step 9. Set up PoliciesEach subsystem in a CMS instance has its own policy processor. If you haveinstalled more than one subsystem in an instance, you should apply theinstructions in this section to each subsystem. That is, you should configure theCertificate Manager and Registration Manager for certificate formulation, issuance,renewal, and revocation policies. Similarly, configure the Data Recovery Managerfor key archival and recovery policies. To understand policy, see “Introduction toPolicy” on page 579.1. During installation, a few policy rules are already created and enabled. Checkeach policy rule and decide whether you want to use it. If you don’t, you caneither disable it or delete it altogether from the configuration. For those rulesthat you want to use, check the configuration parameter values and makechanges as appropriate.2. Determine if you want to add any new policy rules. Check the built-in policyplug-in modules to see if they can be used to create the rules you want. You canalso plug-in your own modules in the CMS framework and use them.3. Add new rules, if required.
