Road Map to Configuring SubsystemsChapter 10 CMS Configuration 357Step 8. Schedule JobsEach CMS instance includes a Job Scheduler component that can execute specificjobs at specified times. The Job Scheduler functions similar to a traditional Unixcron daemon in that it takes registered cron jobs and executes them at apreconfigured date and time.During installation, a few jobs are already created and enabled. Jobs that you mightwant to schedule include email notifications of timed events (such as the expirationof a certificate) that require action on the part of users, and periodic activities suchas removing expired certificates from the publishing directory. For scheduling jobs,follow the instructions in “Configuring a Subsystem to Run Automated Jobs” onpage 545.Step 9. Set up PoliciesEach subsystem has its own policy processor and you should apply theinstructions in this section to each subsystem. That is, you should configure theCertificate Manager and Registration Manager for certificate formulation, issuance,renewal, and revocation policies. To understand policy, see “Introduction toPolicy” on page 559.1. During installation, a few policy rules are already created and enabled. Checkeach policy rule and decide whether you want to use it. If you don’t, you caneither disable it or delete it altogether from the configuration. For those rulesthat you want to use, check the configuration parameter values and makechanges as appropriate.2. Determine if you want to add any new policy rules. Check the built-in policyplug-in modules to see if they can be used to create the rules you want. You canalso plug-in your own modules in the CMS framework and use them.3. Add new rules, if required.For instructions to do all of the above tasks, see “Configuring Policy Rules for aSubsystem” on page 569.Step 10. Set up PublishingThis step is optional, and is applicable to the Certificate Manager only—you needto do this only if you want the Certificate Manager to publish certificates and CRLsto any of the supported repositories.• To configure a Certificate Manager to publish certificates and CRLs to anLDAP-compliant directory, such as Netscape Directory Server, see“Configuring a Certificate Manager to Publish Certificates and CRLs” onpage 595.
