Setting Up a Remote OCSP Responder706 Netscape Certificate Management System Installation and Setup Guide • May 2002notFoundAsGood. A certificate’s status can typically be indicated by threepossible OCSP responses, namely GOOD, REVOKED, and UNKNOWN.Select this option if you want the Online Certificate Status Manager toreturn an OCSP response of GOOD if the certificate in question cannot befound in the certificate repository. If you deselect the option, the responsewill be UNKNOWN, which when encountered by Netscape PersonalSecurity Manager (an OCSP-compliant client) results in an error message.includeNextUpdate. The Online Certificate Status Manager can includethe time stamp of next CRL update—a future update time for the CRL orthe revocation information—in the OCSP response that it sends toOCSP-compliant clients. (According to the OCSP protocol, it is optional toinclude the time stamp of next CRL update in an OCSP response.) Selectthis option if you want the OCSP response to contain information aboutthe next CRL update. Leave the option deselected if you don’t want theOCSP response to contain this information.6. Click OK.You’re returned to the Revocation Store Info Management tab7. Click Refresh.Step 7. Restart the Certificate ManagerFor all your changes to take effect, you must restart the Certificate Manager. Youcan use the CMS window to restart the Certificate Manager. To restart CertificateManager from the CMS window:1. Select the Tasks tab.2. Click Restart the Server.When you restart the Certificate Manager, you are prompted to supply thesingle sign-on password for the server.3. Type the single sign-on password you specified during installation and clickOK. The Certificate Manager won’t restart until you provide this password.For more information, see “Required Start-up Information” on page 307.
