Netscape Certificate Management System 6.1, Administrator'S Manual

Page: 142 / 840

Installing a Registration Manager
142 Netscape Certificate Management System Administrator’s Guide • February 2003
Note that the certificate extension text field accepts a single extension blob. If
you want to add multiple extensions, you should use the
ExtJoiner
program,
which is also provided in the
tools
directory. For details on using the
ExtJoiner
program, see Chapter 5, “Extension Joiner Tool” of CMS
Command-Line Tools Guide.
For more information about extensions, see Appendix G, “Certificate and CRL
Extensions.”
Click Next to continue.
15.
Registration Manager Signing Certificate Request Creation. This
informational screen tells you that the wizard has all the information required
to generate the key pair and certificate request. In the previous screen, if you
chose to include the Subject Key Identifier extension in the certificate, you’ll be
given the choice to select the format for the certificate request. Otherwise, the
request format will be PKCS #10.
❍
If you want the wizard to generate the certificate request in PKCS #10
format, select the “Generate PKCS10 request” option.
❍
If you want the wizard to generate the certificate request in CMC format,
select the “Generate CMC full enrollment request” option. (This option is
available only if you selected to add the Subject Key Identifier extension to
the certificate in the previous.)
Click Next. The wizard creates a certificate request that you must submit to a
CA, which could be a remote Certificate Manager or a third-party CA.
16.
Submission of Request. Select whether you want to submit the request
manually or send the request automatically to a remote Certificate Manager.
❍
To automatically submit the request to a remote Certificate Manager (or for
automatic enrollment), follow these steps:
I.
Select the “Send the request to a remote CMS now” option.
II.
Enter the host name and end-entity port number of the remote
Certificate Manager, and specify whether the end-entity port is SSL
enabled.
III.
Click Next to submit the request.
The Certificate Request Result screen appears, confirming that the
request has been submitted. Note the request ID provided in the
response message. (You can use it later to retrieve the certificate, once
it has been issued, from the end-entity port.)