Understanding Subsystem Setup694 Netscape Certificate Management System Administrator’s Guide • February 2003Certificate PoliciesThe non-profiles policy feature is not part of the Common Criteria Environment.All enrollments are set up using the certificate profiles feature.AuthenticationIn the Common Criteria Environment, you can enable and configure theagent-approved authentication method or any of the authentication plug-ins inconjunction with a certificate profile. You cannot set up certificate-basedenrollment or in-person enrollment. See Chapter 9, “Authentication” for completeinformation about authentication. See the Chapter 10, “Certificate Profiles” forinformation about using authentication with certificate profiles.CRLsIn a CA subsystem, you can set up the CRL feature and any of the three issuingpoints for CRLs under the Common Criteria Environment. When setting up theCRL feature, you cannot set up a CRL that does not have an update frequencyspecified in the “Update at this frequency” field. Compliant CRLs must contain thenextUpdateTime extension, which will not be filled in correctly if an updatefrequency is not specified. Note that you can specify an update frequency and alsospecify that the CRL is updated every time a certificate is revoked; both settingswill be respected. For complete information on CRLs, see Chapter 14, “Revocationand CRLs.”JobsJobs are events that can be scheduled to be activated periodically. You can set upany of the available job plug-ins in the Common Criteria Environment. Any customplug-ins for any of the Jobs feature are not part of the Common CriteriaEnvironment, however. Although you will not specifically be instructed toconfigure Jobs, you can turn on and configure any jobs that are provided bydefault. If you want notifications to be sent, be cautious on the email addresses youprovide and make sure they belong to appropriate roles. For complete informationon jobs, see Chapter 13, “Automated Jobs.”
