This commit is contained in:
cotter%netscape.com 2000-06-16 05:45:58 +00:00
Родитель 5c53e520b1
Коммит 0527c678f9
1 изменённых файлов: 3 добавлений и 3 удалений

Просмотреть файл

@ -43,7 +43,7 @@
</FONT></B><P><A NAME="1028225">
This document contains these sections:</P></A>
<ul><A NAME="1028189"><LI><a href="help.htm#1044151">Introduction to Personal Security Manager</a></LI></A><BR><A NAME="1028195"><LI><a href="help.htm#1045279">Information Tab</a></LI></A><BR><A NAME="1047049"><LI><a href="help.htm#1030083">Applications Tab</a></LI></A><BR><A NAME="1031829"><LI><a href="help.htm#1030743">Certificates Tab</a></LI></A><BR><A NAME="1036503"><LI><a href="help.htm#1036138">Advanced Tab</a></LI></A><BR><A NAME="1036049"><LI><a href="help.htm#1031657">Other Personal Security Manager Windows</a></LI></A><BR></ul><A NAME="1044740">
<ul><A NAME="1028189"><LI><a href="help.htm#1044151">Introduction to Personal Security Manager</a></LI></A><BR><A NAME="1028195"><LI><a href="help.htm#1045279">Information Tab</a></LI></A><BR><A NAME="1047049"><LI><a href="help.htm#1030083">Applications Tab</a></LI></A><BR><A NAME="1031829"><LI><a href="help.htm#1030743">Certificates Tab</a></LI></A><BR><A NAME="1036503"><LI><a href="help.htm#1036138">Advanced Tab</a></LI></A><BR><A NAME="1036049"><LI><a href="help.htm#1056728">Other Personal Security Manager Windows</a></LI></A><BR></ul><A NAME="1044740">
<a href="help.htm#1044151">Introduction to Personal Security Manager</a> provides overview information about Personal Security Manager, this help system, and basic network security concepts. The rest of this document describes specific Personal Security Manager screens. </P></A>
<A NAME="1044151">&nbsp</A><A NAME="Introduction to Personal Security Manager">
</A>
@ -68,7 +68,7 @@ What You Can Do with Personal Security Manager</FONT></h2>
<A NAME="1044443">
Personal Security Manager allows you to perform the following security tasks:</P></A>
<ul><P><A NAME="1043602"><LI><B>Get your own certificate.</B> Personal Security Manager greatly simplifies the process of applying for a <a href="glossary.htm#1018895">certificate</a>. Much like a credit card or a driver's license, a certificate is a form of identification you can use to identify yourself over the Internet and other networks. To get a certificate, go to the URL for any certificate authority and follow the on-screen instructions for obtaining a certificate. For a list of certificate authorities, see <a href="https://certs.netscape.com/" TARGET="_blank">Client Certificates</a>. </LI></A><P><A NAME="1043605"><LI><B>Check security for the current window. </B>When you are viewing any browser or email window, open Personal Security Manager to see security information about the window that you are viewing. The sections <a href="help.htm#1041627">Information About Web Pages</a>, <a href="help.htm#1046060">Information About Stored Email Messages</a>, and <a href="help.htm#1046671">Information About Email Messages You Are Composing</a> in this document explain each information panel. To see the explanation for a specific panel, click the Help button for that panel.</LI></A><P><A NAME="1043618"><LI><B>Control application security settings.</B> To control security settings for Navigator, Messenger, and JavaScript applications, open Personal Security Manager, then click the Applications tab. You can then select panels for Navigator, Messenger, or JavaScript. The section <a href="help.htm#1030083">Applications Tab</a> in this document explains how to use these panels. To see the explanation for a specific panel, click the Help button for that panel.</LI></A><P><A NAME="1043628"><LI><B>Manage Certificates.</B> Personal Security Manager maintains a <a href="glossary.htm#1023462">certificate store</a><I> </I>that contains all available certificates. These include your own certificates, other people's certificates, web site certificates, and certificate authority certificates. To view your certificates, open the main Personal Security Manager window, then click the Certificates tab. You can select panels that allow you to view and manipulate each kind of certificate. The section <a href="help.htm#1030743">Certificates Tab</a> in this document explains how to use the panels for each type of certificate. To see the explanation for a specific panel, click the Help button for that panel.</LI></A><P><A NAME="1043637"><LI><B>Manage external modules and advanced settings.</B> Personal Security Manager can be configured to use external hardware, such as a <a href="glossary.htm#1027625">smart card</a><I>,</I> that performs some or all cryptographic operations and optionally stores your certificates. To view these and other advanced settings, open the main Personal Security Manager window, then click the Advanced tab. The section <a href="help.htm#1036138">Advanced Tab</a> in this document explains how to use the Advanced panels. To see the explanation for a specific panel, click the Help button for that panel.</LI></A></ul><A NAME="1043648">
Personal Security Manager also occasionally displays small windows containing special information or warnings. The section <a href="help.htm#1031657">Other Personal Security Manager Windows</a> in this document explains these windows. To see the explanation for any Personal Security Manager window, click the Help button in the window.</P></A>
Personal Security Manager also occasionally displays small windows containing special information or warnings. The section <a href="help.htm#1056728">Other Personal Security Manager Windows</a> in this document explains these windows. To see the explanation for any Personal Security Manager window, click the Help button in the window.</P></A>
<A NAME="Understanding Network Security"></A><A NAME="1026014">&nbsp</A>
<h2><FONT Face="arial, helvetica, sans-serif" size="+1">
Understanding Network Security</FONT></h2>
@ -875,7 +875,7 @@ OCSP Settings</FONT></b></p><A NAME="1049124">
The Online Certificate Status Protocol (OCSP) makes it possible for Personal Security Manager to perform an online check of a certificate's validity each time the certificate is viewed or used. This process involves checking the certificate against a certificate revocation list (CRL) maintained at a specified web site. Your computer must be online for OCSP to work.</P></A>
<A NAME="1052092">
To specify how Personal Security Manager uses OCSP, you click OCSP Settings in the Options panel of the Advanced tab. You can choose one of these settings:</P></A>
<ul><P><A NAME="1052068"><LI><B>Do not use OCSP for certificate verification.</B> Select this setting if you don't want Personal Security Manager to perform an on-line status check each time it verifies a certificate. Instead, whenever Personal Security Manager performs <a href="glossary.htm#1025527">certificate verification</a> it only confirms the certificate's validity period and that it is correctly signed by a CA whose own CA certificate is both present in the certificate store and marked as trusted for issuing that kind of certificate.</LI></A><P><A NAME="1052069"><LI><B>Use OCSP to verify only certificates that specify an OCSP service URL.</B> Select this setting if you want Personal Security Manager perform an on-line status check each time it verifies a certificate that specifies a URL for the purpose of performing such a check. If a URL is specified by the certificate, Personal Security Manager makes sure that the certificate is listed there as valid as well as performing the standard checks of validity period and trust settings.</LI></A><P><A NAME="1052070"><LI><B>Use OCSP to verify all certificates, using the URL and signer specified here.</B> Select this setting if you want Personal Security Manager to perform an on-line status check each time it verifies any certificate. In this case, you must also specify a URL to check against and the CA certificate used to digitally sign each response to the online status check. If you select this setting, you will not be able to use any certificate whose validity cannot be verified with an OCSP response that is signed by the specified CA certificate or signed using a certificate that chains to it.</LI></A></ul><A NAME="1031657">&nbsp</A><A NAME="Other Personal Security Manager Windows">
<ul><P><A NAME="1052068"><LI><B>Do not use OCSP for certificate verification.</B> Select this setting if you don't want Personal Security Manager to perform an on-line status check each time it verifies a certificate. Instead, whenever Personal Security Manager performs <a href="glossary.htm#1025527">certificate verification</a> it only confirms the certificate's validity period and that it is correctly signed by a CA whose own CA certificate is both present in the certificate store and marked as trusted for issuing that kind of certificate.</LI></A><P><A NAME="1052069"><LI><B>Use OCSP to verify only certificates that specify an OCSP service URL.</B> Select this setting if you want Personal Security Manager perform an on-line status check each time it verifies a certificate that specifies a URL for the purpose of performing such a check. If a URL is specified by the certificate, Personal Security Manager makes sure that the certificate is listed there as valid as well as performing the standard checks of validity period and trust settings.</LI></A><P><A NAME="1056737"><LI><B>Use OCSP to verify all certificates, using the URL and signer specified here.</B> Select this setting if you want Personal Security Manager to perform an on-line status check each time it verifies any certificate. If you select this setting, you should also choose the Response Signer certificate that identifies the signer of the OCSP responses (scroll to the right to use the pop-up menu). With this setting, the only certificates Personal Security Manager recognizes are those that can be verified by an OCSP response signed with the Response Signer certificate (or signed using a certificate that chains to it).<br><br>When you choose a Response Signer certificate from the pop-up menu, Personal Security Manager fills in the Service URL (if available) for that signer automatically. If the Service URL is not filled in automatically, you must provide it yourself; ask your system administrator for details.</LI></A></ul><A NAME="1056728">&nbsp</A><A NAME="Other Personal Security Manager Windows">
</A>
<H1><FONT Face="arial, helvetica, sans-serif" size="+2">
Other Personal Security Manager Windows