Understanding Subsystem SetupAppendix C Understanding the Common Criteria Evaluated CMS Setup 695NotificationsAutomated email notifications are event-driven tasks that send out an email viaSMTP when a specified event occurs. You can set up any of the availableNotification plug-ins in the Common Criteria Environment. Custom plug-ins forthe Notification feature are not part of the Common Criteria Environment,however. Although you will not specifically be instructed to configurenotifications, you can turn on and configure any Notification task that is providedby default. Be cautious on the email addresses you provide and make sure theybelong to appropriate roles. For complete information on Notifications, seeChapter 12, “Automated Notifications.”PublishingYou can set up any of the methods of publishing in any of the configurationsavailable in CMS in the Common Criteria Environment. If you set up LDAPpublishing, it is highly recommended that you set it up using SSL clientauthentication and that you set up the Directory Server in SSL mode as well. Forinformation about publishing, see Chapter 15, “Publishing.”Self TestsCMS provides a self-diagnostic feature that checks the sanity of a few key itemsduring a CMS subsystem startup. Any failed self test is an indication of a fatal errorto the subsystem. Technically, CMS allows users to add their own self tests asplug-ins; however, only the self-tests provided by default are Common Criteriaevaluated. You will not be instructed to configure self tests during the CMSCommon Criteria Setup Procedure, but this is because the self tests are turned onand operational by default. For more information, see “Self Tests” on page 282.Trust Between SubsystemsYou will be instructed to set up trust between CMS subsystems in the followingtwo scenarios:• Between a Registration Manager and the Certificate Manager that issuescertificates for this Registration Manager• Between a Certificate Manager and the Data Recovery Manager that handleskey archival and recovery for this Certificate Manager
