Copyright: Saturday, January 04, 2003 15:50:09


Displays the name of the certification authority (CA). The name of the certification authority is specified during the setup of the CA and cannot be changed.


Displays the description of the certification authority. The description of the certification authority is specified during the setup of the CA and cannot be changed.


Displays the certificate of the certification authority.  If this is a root certification authority, it is a self-issued certificate.  For a subordinate certification authority, the issuer of the CA certificate is the certification authority one level up in the certification hierarchy.


Displays the name of the cryptographic service provider used by the certification authority.


Displays the name of the hash algorithm used by the certification authority.


Displays the name of the policy module used by the certification authority.


Displays the description of the policy module.


Displays the version of the policy module.


Displays the copyright information for the policy module.


Click to change the configuration of the policy module.


Click to select a different policy module for the certification authority.


Lists the active exit modules used by the certification authority.


Click to add an active exit module.


Click to remove an active exit module.


Displays the name of the selected exit module used.


Displays the description of the selected exit module.


Displays the version of the selected exit module.


Displays the copyright information for the selected exit module.


Click to change the configuration of the selected exit module.


Click to select a different exit module for the certification authority.


Specifies whether the certification authority (CA) publishes information to Active Directory. If Active Directory is available during the setup of a certification authority, the CA uses it.  If Active Directory is unavailable during the setup of a certification authority, the CA does not use it.


Displays the location of the certification authority’s shared folder. The shared folder is a storage feature of a certification authority that enables the publishing of certification authority data when Active Directory is not present or unavailable. A shared folder is optional when the certification authority uses Active Directory.

The use and location of the shared folder is selected during the setup of the certification authority and cannot be changed.


Displays the location of the certificate database.  This database has a record of every certificate issued by the certification authority. The location of the certificate database is specified during the setup of the certification authority and cannot be changed.


Displays the location of the certificate request log.  The certificate request log has an entry for every certificate request received by the certification authority. The location of the certificate request log is specified during the setup of the certification authority and cannot be changed.


Lists the columns that can be displayed for the item that is selected in the console tree. Select the columns you want to display and clear the columns you want to hide.


Click to move the selected column one level up in the display order.


Click to move the selected column one level down in the display order.


Click to restore the default column display.


Lists the available modules from which you can designate the active module.


Specifies the number of interval units (in hours, days, weeks, months or years) for the scheduled publishing of the certificate revocation list (CRL). The entry must be an integer greater than zero.


Displays the date and time of the next scheduled publishing of the certificate revocation list (CRL).  This value is determined by adding the date and time of the last publication of the certificate revocation list to the publishing interval that was in effect when that CRL was published.


Lists the current filter restrictions for the display in the details panel.  Filter restrictions are used to limit the number of items displayed in the details pane.


Click to add a filter restriction for the display in the details pane.


Click to remove a filter restriction for the display in the details pane.


Click to remove all filter restrictions for the display in the details pane.


Click the field you want to use for the filter restriction.


Click the logical operator you want to use for the filter restriction.


Type the value you want to associate with the field name and logical operator in order to create a filter restriction.


Select the date you want to associate with the field name and logical operator in order to create a filter restriction.


Select the time you want to associate with the field name and logical operator in order to create a filter restriction.


Select the reason for which the certification authority is revoking the certificate.


Type the URL where the certification authority can publish the certificate revocation list.  This URL can be an HTTP, FTP, FILE or LDAP address.


Click to add a URL where the certification authority can publish the certificate revocation list.


 Lists the URLs where the certification authority publishes its certificate revocation list.


Click to remove a URL where the certification authority publishes the certificate revocation list.


Select this check box if you want to allow certificates to be published to the file system.


Select this check box if you want to allow certificates to be published to Active Directory.  They will be published to the location specified by the certificate request.


Specifies that all incoming certificate requests to this CA will be considered "pending".  The administrator of the CA must review each pending certificate request and then decide whether to issue the certificate or reject the request.


Specifies that the CA will automatically issue a certificate whenever a valid certificate request is received.


Click to add a URL where you want the certification authority to publish its own certificate. This URL can be an HTTP, FTP, FILE or LDAP address.


Click to add a URL where you want the certification authority to publish this information.  This URL can be an HTTP, FTP, FILE or LDAP address.


Displays the list of URLs where the certification authority publishes its own certificate.


Displays the list of URLs where the certification authority publishes this information.


Click to remove a URL where the certification authority publishes its own certificate.


Click to remove a URL where the certification authority publishes its certificate revocation list.


Specifies that you want to reuse the current public and private keys of the certification authority when you renew its certificate.


Specifies that you want to generate new public and private keys for the certification authority when you renew its certificate.


Specifies that any certificate manager can manage certificates for any subject. Certificate managers are configured by assigning the Issue and Manage Certificates permission in the Security tab.


Specifies that certificate management is restricted. This allows control of which certificate managers can manage certificates for subjects.


Lists the certificate managers that can be granted or denied permission to manage certificates for subjects. The certificate managers in this list have the Issue and Manage Certificates permission assigned.


Lists the subjects that have been specified for the selected certificate manager and the certificate management access that has been granted.


Specifies whether the certificate manager can manage the selected subject or group.


Adds a subject or group to the list of managed subjects and groups for this certificate manager.


Removes the selected subject or group from the list of managed subjects and groups for this certificate manager.


Specifies whether an event is entered in the security log when the certification authority database is backed up or restored.


Specifies whether an event is entered in the security log when a change is made to the configuration settings of the certification authority.


Specifies whether an event is entered in the security log when the security settings of the certification authority are changed. This includes increasing, decreasing, or changing the settings.


Specifies whether an event is entered in the security log when certificate requests are issued or denied. This setting may generate a large number of entries in the event log.


Specifies whether an event is entered in the security log when a certificate is revoked or a certificate revocation list (CRL) is issued.


Specifies whether an event is entered in the security log when a private key associated with a stored certificate is stored or retrieved.


Specifies whether an event is entered in the security log when the certification authority service is stopped or started.


Specifies that the private key associated with a certificate’s public key will not be stored by the certification authority.


Specifies that the private key associated with a certificate’s public key will be stored by the certification authority. This option requires that at least one key recovery agent certificate is specified.


Provides a space for you to type the number of key recovery agents to use for key archival.  When this value is greater than 1, the certification authority will select the key recovery agents from the list of available key recovery agents.


Lists the key recovery agent certificates configured for certificates issued. If the number of key recovery agent certificates listed is larger than the number of key recovery agents to use, the certificates that are used will be selected by the certification authority.


Adds a key recovery agent certificate to the list of available key recovery agents.


Removes a key recovery agent certificate from the list of available key recovery agents.


Views the selected key recovery agent certificate.


Lists the certificates currently being used by the certification authority.


Lists the exit modules currently being used by this certification authority.


Lists the extensions that are available to configure on this certification authority.


Specifies whether the selected location will be included in certificates issued by this certification authority. This option is unavailable when the selected location cannot normally be reached by subjects.


Specifies whether the selected location will provide the subject with a delta certificate revocation list. This option is unavailable when the selected location cannot normally be reached by subjects.


Specifies whether the selected location is included in the published certificate revocation list (CRL). This is useful when manually publishing a CRL to Active Directory. Because this location is in Active Directory, this option is available only when the location is an LDAP Uniform Resource Locator (URL).


Specifies whether the selected location should be included when publishing online certificate status protocol (OCSP) extensions. This allows a client to validate the subject certificate through this path.


Specifies whether the certificate revocation list (CRL) will be published to the selected location. This selection is unavailable when publishing to an HTTP Uniform Resource Locator (URL). The certification authority needs appropriate permissions to this location.


Lists the environmental variables that can be inserted in the location path. These will change to reflect the current subject’s environment at the time they are requested.


Inserts the currently selected variable in the location path.


Displays detailed information about the currently selected variable.


Specifies whether the delta certificate revocation list (delta CRL) will be published to the selected location. This selection is unavailable when publishing to an HTTP URL.


Displays general request information about the certificate request.


Displays the list of extensions that were received with the certificate request, whether the extension was inserted by a policy or by the certification authority, whether the extension was marked critical or not, and whether the extension was enabled or disabled.


Displays detailed information about the selected extension.


Specifies whether delta certificate revocation lists (CRLs) are published. A delta CRL is smaller than a full CRL and contains the revocation information that has changed since the last full CRL was published. Publishing delta CRLs is recommended when large amounts of certificate revocation may occur and helps minimize the amount of network traffic generated by repeatedly copying the full CRL.


Specifies the number of interval units (in hours, days, weeks, months or years) for the scheduled publishing of the delta CRL. The entry must be an integer greater than zero.


Specifies the type of units (hours, days, weeks, months, years) used for publishing the delta CRL.


Lists the published CRLs currently generated by this certification authority (CA).


Lists the published delta CRLs (if any) currently generated by this certification authority (CA). Because publishing delta CRLs is optional, this list may be empty.


Displays detailed information about the selected CRL.


Displays detailed information about the selected delta CRL.


Specifies the type of units (hours, days, weeks, months, years) used for publishing the CRL.