Netscape Certificate Management System 6.1, Administrator'S Manual, Page: 134 / 840

Cloning a CA
134 Netscape Certificate Management System Administrator’s Guide • February 2003
Testing the Clone-Master Connection
To test whether your clone-master CA setup is complete and functional, repeat
these steps for each clone Certificate Manager.
1.
Request a certificate from the clone CA
2.
Approve the request.
Skip this step if you requested the certificate using any of the automated
enrollment methods. Complete this step if you used the agent-approved
enrollment form for requesting the certificate; the request you submitted is
waiting in the agent queue for approval by an agent.
3.
Download the certificate to the browser.
4.
Revoke the certificate.
5.
Check master CA’s CRL for the revoked certificate.
To verify that the revoked certificate has been included in the master
Certificate Manager’s CRL, go to the master Certificate Manager’s Agent
Services interface. In the left frame, click Update Certificate Revocation List.
Find the CRL and display it.
The CRL appears in the browser window. In the list, look for the certificate
revoked by the clone Certificate Manager. If you don’t see the certificate, check
logs to resolve the problem.