System information

• Lists key recovery requests from end entities.
• Lists or searches for archived keys.
• Recovers private data-encryption keys.
• Authorizes and approves key recovery requests.
Key recovery requires the authorization of one or more recovery agents. The DRM
administrator designates recovery agents. Typically, several recovery agents are required to
approve key recovery requests in the DRM, so DRM administrators should designate more
than one agent.
For more information on these tasks, see Chapter 7, DRM: Recovering Encrypted Data.
2.3. Online Certificate Status Manager Agent Services
The default entry page to the Online Certificate Status Manager (OCSM) agent services is
shown in Figure 2.4, “Online Certificate Status Manager Agent Services Page”. Only designated
OCSM agents, with a valid certificate in their client software, are authorized to access these
pages.
Figure 2.4. Online Certificate Status Manager Agent Services Page
An OCSM agent performs the following tasks:
• Checks that CAs are currently configured to publish their CRLs to the OCSM.
Chapter 2. Agent Services
12