ADSS Admin Guide

Steps

Description

Step 1:

Use the Key Manager module to generate the keys needed for the ADSS SCVP Service to sign the response. At least one SCVP response signing key is required with purpose "SCVP Response Signing".

Step 2:

Register all the root and/or intermediate CAs that will be involved in path building/validation in ADSS Trust Manager module.

Note: Registering the intermediate CAs can shorten the path discovery/validation process overheads and time.

Step 3:

Define an SCVP Validation Policy to how a certificate path can be discovered and/or validated for registered/non-registered CAs. Client applications refer to the SCVP Validation Policy within their request messages sent to the ADSS SCVP Service.

Step 4:

Import the CRLs against the CAs that will be involved in path validation in CRL Monitor module to determine the revocation status if you wish to use the locally held CRLs for revocation checking.

Step 5:

Use the ADSS SCVP Service Manager to start/stop/restart the service. ADSS SCVP Service is required to be restarted when an SCVP Validation Policy is added/updated/deleted.