Proxy Profile Approach
A proxy profile, defined on an endpoint type level can be used to authenticate PKI endpoints. Any Provisioning administrator is able to manage such PKI endpoint types. An Administrator’s Provisioning User will not be required to have Entrust profile related information in its eTOptionDataPKI attribute.
All Provisioning administrators will have the same level of access to an Entrust system. This eliminates any possible strange exploration results, where an exploration is initiated by a person with low level PKI access. If you find this approach insecure, you can use individual profiles and discussed in the next section.
Copyright © 2011 CA. All rights reserved. | Email CA Technologies about this topic |