Automated Notifications552 Netscape Certificate Management System Installation and Setup Guide • October 2001• Notification of New Request in Queue—agents are notified by email that arequest has been added to the request queue. Alternatively (or in addition) aschedulable job can notify agents at regular intervals of the current state of therequest queue; see “Configuring a Subsystem to Run Automated Jobs” onpage 565.Notifications of Certificate Issuance to EndEntitiesYou can configure the Certificate Manager or Registration Manager to send anotification message to users who have been issued certificates in response toenrollment requests. This message normally includes information about the issuedcertificate and instructions for importing the certificate into the user’s client.This kind of notification involves a listener class in the subsystem that registers aninterest in an appropriate event, in this case successful completion of an enrollmentrequest. In the CMS configuration, this listener class for a Certificate Manager isdefined as ca.notification.certIssued and for the Registration Manager it isdefined as ra.notification.certIssued.For more information on listeners, check the samples directory:/cms_sdk/cms_jdk/samples/listenersWhen a certificate is issued, the listener builds a notification message based on aconfigured template and sends it to an email address that it determines by using anemail resolver. By default the email is obtained from the email address entered inthe request or from the certificate.• The email resolver first checks the request for the email address and if doesn’tfind one, it checks the subject name of the certificate for the email address; ifthe subject name doesn’t include the email address, the resolver checks thecertificate for the Subject Alternative Name extension to see whether itspecifies the email address. For specifying an email address in the SubjectAlternative Name extension, see “Configuring Policy Rules for a Subsystem”on page 589.• In the absence of an email address, the notification is sent to the email addressspecified in the “Sender’s Email Address” field, instead of the requestor, as anundeliverable notification. There’ll also be a message to this effect in the logs;see “Monitoring CMS Logs” on page 779.
