Installing a Standalone Data Recovery Manager
Chapter
6
Data Recovery Manager
225
❍
Token.
Enter either
internal
(if you plan to use the internal/software
token) or the name of an external token to store the SSL server and key
pair. If you have not previously initialized the token’s password, you must
do so in this screen. See “Tokens,” on page 217 for more information.
❍
Key Type.
Choose RSA.
❍
Key Length.
Available key sizes for RSA are 512, 768, 1024, 2048, 4096, or
Custom. Available key sizes for DSA are 512, 1024, or Custom (which must
be in increments of 64 bits only).
See “Key Type and Length” on page 217 for more information.
Click Next to continue.
22.
Message Digest Algorithm.
Select the algorithm to use for computing the
certificate signature. The choices are: SHA-1, MD2, or MD5.
Click Next to continue.
23.
Subject Name for SSL Server Certificate.
Type the values for the subject DN
components; these values the Data Recovery Manager’s SSL server certificate.
The CN must be the fully-qualified host name of the machine on which you’re
installing the Data Recovery Manager.
Click Next to continue.
24.
Certificate Extensions for SSL Server Certificate.
Select the required
extensions. The default settings should work for most deployments. If
necessary, you can add an additional extension by pasting its base-64 encoding
in the space provided on this screen. (For details, see Step 11 of this section.)
Click Next to continue.
25.
SSL Server Certificate Request Creation.
This is an informational screen that
tells you that the wizard has all the information required to generate the key
pair and certificate request. In the previous screen, if you chose to include the
Subject Key Identifier extension in the certificate, you’ll be given the choice to
select the format for the certificate request. Otherwise, the request format will
be PKCS #10.
❍
If you want the wizard to generate the certificate request in PKCS #10
format, select the “Generate PKCS10 request” option.
❍
If you want the wizard to generate the certificate request in CMC format,
select the “Generate CMC full enrollment request” option.
Click Next. The wizard generates a certificate request that you must submit to
a CA.
Summary of Contents for Certificate Management System 6.1
Page 1: ...Administrator s Guide Netscape Certificate Management System Version6 1 February 2003...
Page 28: ...Documentation 28 Netscape Certificate Management System Administrator s Guide February 2003...
Page 82: ...Uninstalling CMS 82 Netscape Certificate Management System Administrator s Guide February 2003...
Page 382: ...ACL Reference 382 Netscape Certificate Management System Administrator s Guide February 2003...
Page 794: ...Managing Certificates 794 Managing Servers with Netscape Console December 2001...
Page 810: ...The SSL Handshake 810 Managing Servers with Netscape Console December 2001...
Page 828: ...828 Netscape Certificate Management System Administrator s Guide February 2003...
