Access to the agent services forms requires certificate-based authentication. Only users who authenticate with the correct certificate and who have been granted the appropriate access privilege can access and use the forms. Operations are performed over SSL, so the server connection uses HTTPS on the SSL agent port.

The agent services URLs use the following format: https://<hostname:port/subsystem_type>/agent/<subsystem_type>

For example, if a CA is installed on a host named server.example.com and is listening to port 9443, use the following URL to access the agent services interface: https://server.example.com:9443/ca/agent/ca

There is also a services page for each subsystem. The URL for the services page for the previous example would be as follows: https://server.example.com:9443/ca/services

The services page has links to the all of the HTML pages for the subsystem, such as agent and end entities, as well as the administration page if the subsystem has not yet been configured.