Agent TasksChapter 1 Agent Services 15Agent TasksThe designated agents for each subsystem are responsible for the everydaymanagement of end-entity requests and other aspects of the PKI:• Certificate Manager agents manage certificate requests received by theCertificate Manager subsystem, maintain and revoke certificates as necessary,and maintain global information about certificates.• Registration Manager agents manage the certificate requests received by theRegistration Manager subsystem.• Data Recovery Manager agents initiate the recovery of lost keys, and canobtain information about key service requests and archived keys.• Online Certificate Status Manager agents can perform tasks such as checkingwhich CAs are currently configured to publish their CRLs to the OnlineCertificate Status Manager, identifying a Certificate Manager to the OnlineCertificate Status Manager, adding CRLs directly to the Online CertificateStatus Manager, and viewing the status of OCSP service requests submitted byOCSP-compliant clients.To perform the privileged operations of an agent, you use the CMS Agent Servicespages. To access these pages, you must have a personal SSL client certificate, andthe CMS administrator must have identified you as a privileged user in the userdatabase. For more information on how to get set up as a privileged user, see CMSInstallation and Setup Guide.Certificate Manager Agent ServicesThe default entry page to the Certificate Manager agent services is shown in Figure1-2. To access these pages, you must be a designated Certificate Manager agent andyour client software must have a valid certificate identifying you as such.