Netscape MANAGEMENT SYSTEM 6.0 - CUSTOMIZATION Manual

Also see for Certificate Management System 6.0: Installation and setup guide Manual Manual Manual

Contents

Netscape MANAGEMENT SYSTEM 6.0 - CUSTOMIZATION Manual Manual pdf 153 page image

Recover Key By Serial Number InterfaceChapter 6 Agent Interface Reference 153Available on: Data Recovery ManagerFunction: Displays a form for recovering a key.Once a key has been selected from the archive, the Recover Key By Serial NumberInterface can be used to start the recovery operation. This interface accepts theserial number of an archived key and optionally the user ID and passwords ofrecovery agents.The recovery operation can be completed by one call to the Recover Key By SerialNumber Interface if the proper number of recovery agent user IDs and passwordsare provided. In this case, a PKCS #12 blob is returned with the recovered key andan associated public key certificate.The recovery operation can also be deferred if the agent passwords cannot beimmediately provided. In this case, the response from the interface is a new formthat polls the Get Approval Status Interface until the passwords are entered byagents (from other locations) and the PKCS #12 blob can be delivered.Default FormsThe Recover Key By Serial Number Interface typically follows a request to theDisplay Key For Recovery Interface. The result of the Display Key For RecoveryInterface request is to display a key from the archive using thedisplayBySerialForRecovery.template file. This template provides a form formaking a request to the Recover Key By Serial Number Interface to initiate therecovery operation for the selected key.Request ParametersThe following table lists the parameters accepted by the Recover Key By SerialNumber interface.Table 6-29 Parameters Accepted by the Recover Key By Serial Number InterfaceParameter Format and Descriptioncert base-64 encoded PKCS #7 certificateYou must supply the certificate containing the public key corresponding to thekey in the archive. Be sure to include the "-----BEGIN CERTIFICATE-----"header and "-----END CERTIFICATE-----" footer.