More advanced deployments of CIA hierarchies may require you to configure and manage policy and exit
modules on your CIA policy and exit modules exist on every CIA stand alone or enterprise each C has
default policy and exit modules and in most scenarios will not have to configure release modules you
can manage both policy and text modules.
If you use the certification authority council for more complex configuration however you must use the
search tool command line to know what is policy module a policy module determines the action that the
C performs after it receives the certificate to request.
You can configure a default policy module to put every cert request in a band and stayed until an administrator
approves or denies it.
The behavior of the default policy module is to issue a certificate if the surgeons in the certificate
template allow it.
However you can install a custom policy module to do other tasks when the CIA receives this certificate
request for example if you install Microsoft Identity Manager 2016 certificate management in your internal
PGI you will have to deploy the MMS certificate management policy module on your receipt that issue
certificates Mame 2016 can manage certificate issuance through workflows the main certificate management
policy module forwards each request for a certificate that is managed by Mame 2016 certificate management
to Mame 2016 64 certificate management when a senior receives the request after the member floor processes
the request it issues the certificate or denies the request the certificate management policy module
also specifies the signature certificate some print for regions that pass certificate requests from
users to oversee each request that the C signs were there some print specified in the main certificate
management policy module passes to the main workflow before it issues the certificate.
This is one example of using the custom policy module but other third party applications might also
use custom policy modules.
So what is an exit module exit module.
Unlike the policy module the exit module determines what happens with a certificate after the C issues
it the most common actions are to send an email or publish a certificate file.
These actions are possible even with a default exit module on each C however.
You can also deploy a custom policy module to use the same example as a policy module.
If you deploy in 2006 students certification management in your environment you also will have to deploy
a custom exit module to Yossi the exit module forwards.
Data about each issued certificate to Microsoft sequel server that is specified in the exit module if
your right information about the issued certificates to a computer that is run and sequel server Mame
sort of certificate management kind view and monitor the issued certificates without direct interaction
with the CIA database.
NCAA can use multiple exit modules so more attorneys look unlike the policy module where you can have
only one active policy module at a time for example if you want to send an email to a specific address
each time they say issues a certificate you have to use search you steal to specify this sentence because
they are not available in it in the C administrator council.
First you should specify the simple mail transfer protocol server that is the use to send emails which
you can do by running the following search tool command.
You have to type search to till then searched rich exit backslash awesome to be backslash and the name
of the server.
And you have to enter the fully qualified to my name of your email server after this you have to specify
the wound and email address to reach the notification is sent by type in the following command search
to deal dash set wretch exit backslash awesome to be backslash C arrive issued backslash to and email
stream the exit module on the C that is configured to send emails on any wound does not use as empty
P authentication if you if your assumed to be server requires authentication you have to configure it
on the C side by typing the following command search your deal and you have to specify set range parameter
and set a sim to be in for parameter where the user name specifies the user name of a well it account
on the ASM to be server you will receive a prompt to provide the password for this user name besides
send in notification emails when they see issues a certificate you can also configure an exit module
to send notifications over the following events you can send notifications on certificate to request
an abandoned state certificate to request denial certificate revocation CRL issuance CAA service startup
and see a service shut down if you want to configure an exit module to publish certificates to a file
system you can use the CIA management council to open the properties of the exit module after you enable
the allow with certificates to be published to the file system option and restore the CEA certificates
that issue from the from that seek corporate to the DOT sir file in the Windows system 32 backslash
search and roll folder all they see however for this to a cure or the certificate requesters must include
a cert file colon true attribute in their request if you deploy custom exit modules their configuration
might be possible through the senior management council of or with some other tool.