Chapter 7. OCSP: Agent Services

Chapter 7. OCSP: Agent Services

7.1. Listing CAs Identified by the OCSP
7.2. Identifying a CA to the OCSP
7.3. Adding a CRL to the OCSP
7.4. Checking the Revocation Status of a Certificate

This chapter describes how to perform Online Certificate Status Manager (OCSP) agent tasks, such as identifying a CA to the OCSP and adding a CRL to the OCSP's internal database. This service is available only when the OCSP subsystem is installed. The OCSP agent services page allows authorized agents to accomplish these tasks.

NOTE

For this documentation, Online Certificate Status Manager is abbreviated OCSP.

7.1. Listing CAs Identified by the OCSP

The OCSP can be configured to receive CRLs from multiple Certificate Managers. Each Certificate Manager that can publish CRLs to the OCSP must have its CA signing certificate stored in the internal database of the OCSP. For instructions, refer to Section 7.2, “Identifying a CA to the OCSP”.

The list of Certificate Managers currently recognized by the OCSP can be viewed at any time. To see the list of Certificate Managers, do the following:

  1. Open the OCSP agent services page.

  2. In the left frame, click List Certificate Authorities.

OCSP List Certificate Authorities Page

Figure 7.1. OCSP List Certificate Authorities Page