About Publishing618 Netscape Certificate Management System Administrator’s Guide • February 2003About PublishingCMS is capable of publishing certificates to a file or an LDAP directory, and CRLsto a file, an LDAP directory, or to an OSCP responder.The publishing feature is very flexible allowing you to publish to a file, publish toan LDAP directory, to an OSCP responder, or all three.Further, you can set up certain kinds of certificates or CRLs to be published toeither medium, or all three. For example, you could publish CA certificates only toa directory and not to a file, and publish user certificates to both a file and adirectory.Note: An OCSP responder only provides information about CRLs, you do notpublish certificates to an OCSP responder.You can also create different publishing locations for certificates files and crls files,or even different publishing locations for different types of certificates files ordifferent types of CRL files. For example, you can publish CA certificates to onelocation while publishing user certificates to a completely different location.Similarly, you can publish different types of certificates to different places in adirectory, and different types of CRLs to different places in a directory. Forexample, you can identify a type of user, for example ones from the west coastdivision of the company and publish those user certificates in one branch of thedirectory, while publishing certificates for users from the east coast division of thecompany in another branch of the directory.You can set up publishing in a Certificate Manager or a Registration Manager. TheCertificate Manager publishes the certificates and CRLs it issues. The RegistrationManager publishes the certificates it processes, but does not publish CRLs. Youmay want to set up a Registration Manager for publishing because it publishesoutside the firewall, or to publish a subset of the certificates the CertificateManager creates—only those processed by the Registration Manager.Setting up publishing involves configuring Publishers, Mappers, and Rules.
