When the administrator tries to access the administration pages (by clicking the Go to administration page button on the PKI Services home page), access to the administration pages is controlled in one of the following ways:

• A popup window appears, requiring the administrator to enter a user name and password. (See Figure 3 for a sample of the authentication popup window.)
• Alternately, the administrator might have to authenticate by using a previously issued browser certificate. In other words, the administrator would need to have a certificate before visiting the administration Web pages.

By default, the first method is used. However, you can change the runtime behavior so that the second method is used instead. If you decide to use the second method, anyone intending to become a PKI Services administrator needs to request and retrieve a one-year PKI browser certificate for authenticating to z/OS® before trying to access the administration pages.