System information
Approve the request.
The certificate is issued, and the end entity then retrieves and uses it.
Reject the request.
No certificate is issued. The end entity is notified that the request was rejected for the
reasons specified by the agent. The end entity can also view the request status using the
CA's end entities page.
Cancel the request.
No certificate is issued. The end entity is notified that the request was canceled for the
reasons specified by the agent. The end entity can also view the request status using the
CA's end entities page.
Update the request.
The agent has the authority to change the certificate request to ensure that the request
follows the policies that have been set. For example, the agent may change the values for
certificate extensions.
Validate the request.
This checks that the output of the request conforms to the constraints defined in the profile.
Assign the request.
The certificate request is transferred to another agent for approval.
Unassign the request.
This removes the certificate request from an agent's queue.
Enrollment requests are submitted to a certificate profile and are subject to the defaults and
constraints set up in that certificate profile, regardless of whether the request was created from
the input form associated with the certificate profile or the request was created elsewhere and
submitted preformatted.
3. List of Certificate Profiles
The following pre-defined certificate profiles are ready to use when the Certificate System is
installed. These certificate profiles have been designed for the most common types of
certificates, and they provide common defaults and constraints, authentication methods, and
inputs and outputs. You can edit these profiles or add more profiles as necessary. An
administrator can set up additional defaults and constraints using the CS SDK.
Profile ID Profile Name Description
caUserCert Manual User Dual-Use
Certificate Enrollment
Used to enrol user
certificates.
caDualCert Manual User Signing &
Encryption Certificates
Enrollment
Used to enrol dual user
certificates. It works only with
Netscape 7.0 or later.
Chapter 3. CA: Working with Certificate Profiles
22