Copyright: Thursday, October 07, 1999 10:40:32


Displays the name of the certification authority. The name of the certification authority is specified during the setup of the CA and cannot be changed.


Displays the description of the certification authority. The description of the certification authority is specified during the setup of the CA and cannot be changed.


Displays the certificate of the certification authority.  If this is a root certification authority, it is a self-issued certificate.  For a subordinate certification authority, the issuer of the CA certificate is the certification authority one level up in the certification hierarchy.


Displays the name of cryptographic service provider used by the certification authority.


Displays the name of the hash algorithm used by the certification authority.


Displays the name of the policy module used by the certification authority.


Displays the description of the policy module.


Displays the version of the policy module.


Displays the copyright information for the policy module.


Click to change the configuration of the policy module.


Click to select a different policy module for the certification authority.


Lists the active exit modules used by the certification authority.


Click to add an active exit module.


Click to remove an active exit module.


Displays the name of the exit module used by the certification authority.


Displays the description of the exit module.


Displays the version of the exit module.


Displays the copyright information for the exit module.


Click to change the configuration of the exit module.


Click to select a different exit module for the certification authority.


Specifies whether the certification authority publishes information to Active Directory. If Active Directory is available during the setup of a certification authority, the CA uses it.  If Active Directory is unavailable during the setup of a certification authority, the CA does not use it.


Displays the location of the certification authority’s shared folder. The shared folder is a storage feature of a certification authority that enables the publishing of certification authority data when Active Directory is not present or unavailable. A shared folder is optional when the certification authority uses Active Directory.

The use  and location of the shared folder is selected during the setup of the certification authority and cannot be changed


Displays the location of the certificate database.  This database has a record of every certificate issued by the certification authority. The location of the certificate database is specified during the setup of the certification authority and cannot be changed.


Displays the location of the certificate request log.  The certificate request log has an entry for every certificate request received by the certification authority. The location of the certificate request log is specified during the setup of the certification authority and cannot be changed.


Lists the columns that can be displayed for the item that is selected in the console tree. Select the columns you want to display and clear the columns you want to hide.


Click to move the selected column one level up in the display order.


Click to move the selected column one level down in the display order.


Click to restore the default column display.


Lists the available modules from which you can designate the active module.


The number of interval units (in hours, days, weeks, or months) for the scheduled publishing of the certificate revocation list. The entry must be an integer greater than zero.


Specify whether to use hours, days, weeks or months as the interval unit for scheduled publishing of the certificate revocation list.


Displays the date and time of the next scheduled publishing of the certification revocation list (CRL).  This value is determined by adding the date and time of the last publication of the certificate revocation list to the publishing interval that was in effect when that CRL was published.


Specifies whether to disable scheduled publishing of the certificate revocation list.


Displays the current certificate revocation list.


Lists the current filter restrictions for the display in the details panel.  Filter restrictions are used to limit the number of items displayed in the details pane.


Click to add a filter restriction for the display in the details pane.


Click to remove a filter restriction for the display in the details pane.


Click to remove all filter restrictions for the display in the details pane.


Click the field you want to use for the filter restriction.


Click the logical operator you want to use for the filter restriction.


Type the value you want to associate with the field name and logical operator in order to create a filter restriction.


Select the date you want to associate with the field name and logical operator in order to create a filter restriction.


Select the time you want to associate with the field name and logical operator in order to create a filter restriction.


Select the reason for which the certification authority is revoking the certificate.


Type the URL where the certification authority can publish the certification revocation list.  This URL can be an HTTP, FTP, FILE or LDAP address.


Click to add a URL where the certification authority can publish the certification revocation list.


 Lists the URLs where the certification authority publishes its certificate revocation list.


Click to remove a URL where the certification authority publishes the certification revocation list.


Select this box if you want to allow certificates to be published to the file system.  They will be published to the location specified by the certificate request.


Select this box if you want to allow certificates to be published to Active Directory.  They will be published to the location specified by the certificate request.


Specifies that all incoming certificate requests to this CA will be considered "pending".  The administrator of the CA must review each pending certificate request and then decide whether to issue the certificate or reject the request.  This option is only available for stand-alone CAs and is the recommended setting for stand-alone CAs.


Specifies that the CA will automatically issue a certificate whenever a valid certificate request is received.


Click to add a URL where you want the certification authority to publish its own certificate. This URL can be an HTTP, FTP, FILE or LDAP address.


Click to add a URL where you want the certification authority to publish its certificate revocation list.  This URL can be an HTTP, FTP, FILE or LDAP address.


Displays the list of URLs where the certification authority publishes its own certificate.


Displays the list of URLs where the certification authority publishes its certificate revocation list.


Click to remove a URL where the certification authority  publishes its own certificate.


Click to remove a URL where the certification authority publishes its certificate revocation list.


Specifies that you want to reuse the current public and private keys of the certification authority when you renew its certificate.


Specifies that you want to generate new public and private keys for the certification authority when you renew its certificate.