When the Certificate Manager has issued a certificate in response to a request, the user who requested it must receive a copy to install locally. Users install user certificates, such as agent certificates, in client software. Server administrators install servers certificates in the servers that they manage.
Depending on how the Certificate System is configured, an end user who requests a certificate might receive automatic email notification of the success of the request; this email message contains either the certificate itself or a URL from which the user can get the certificate.
If the system is not configured for automatic notification or if the requester is a server administrator, the issued certificate must be sent manually to the requester by the agent, or the requester must be directed to retrieve it up from the Certificate Manager's end-entities page.
Figure 3.5, “A Newly Issued Certificate Page” shows a web page containing a new certificate. This is the page shown after the agent selects Approve this certificate request.
To copy and mail a new server certificate to the requester, do the following:
To deliver a new client certificate to the requester, note the serial number of the approved request, and do the following:
-
Open to the agent services page, click List Requests in the left frame, enter the serial number for the approved request, and click Find.
-
In the Request Queue form, click Details beside the relevant request. Right-click the certificate serial number, and choose Open Frame in New Window from the pop-up menu.
-
In the new browser window containing the certificate, copy the URL from the location or address field.
-
Paste the URL into the body of the message, along with instructions to for the requester to go to that URL and click the Import button at the bottom of the page to import the certificate.
Alternatively, include the URL for the agent services page in the email message along with the certificate serial number, and instruct the user to do following: