Support for Open StandardsChapter 1 Overview 65• Tutorials—“How To” tutorial to help demonstrate how you can create yourown plug-in modules for CMS. Each tutorial includes sample Java source code,environment and build script and a detailed “cookbook” describing how tobuild and install these plug-in modules. Additionally, some tutorials may alsocontain sample configuration files.Support for Open StandardsThis section summarizes the standard message formats and protocols supportedby CMS.Certificate Management Formats and ProtocolsCMS supports the following certificate management formats and protocols. Formore details about the proposed PKIX standards listed here, seehttp://www.ietf.org/html.charters/pkix-charter.html (under InternetDrafts).• Simple Certificate Enrollment Protocol (SCEP). A certificate managementprotocol jointly developed by Cisco Systems and VeriSign, Inc. CEP is an earlyimplementation of CMC (described later in this list). CEP specifies how adevice communicates with a CA, including how to retrieve the CA’s publickey, how to enroll a device with the CA, and how to retrieve a CRL. CEP usesPKCS #7 and PKCS #10.• Certificate Request Message Format (CRMF). A message format used toconvey a request for a certificate to a Registration Manager or CertificateManager. A proposed standard from the Internet Engineering Task Force(IETF) PKIX working group.• Certificate Management Message Formats (CMMF). Message formats used toconvey certificate requests and revocation requests from end entities to aRegistration Manager or Certificate Manager and to send a variety ofinformation to end entities. A proposed standard from the IETF PKIX workinggroup. CMMF is subsumed by another proposed standard, CMC (next item).• Certificate Management Messages over CMS (CMC). A general interface topublic-key certification products based on CMS and PKCS #10, including acertificate enrollment protocol for DSA-signed certificates with Diffie-Hellmanpublic keys. A proposed standard from the IETF PKIX working group. CMCincorporates CRMF and CMMF. Future versions of CMS will support thisstandard as it is finalized.
