Netscape Certificate Management System 6.1, Administrator'S Manual

Page: 234 / 840

Configuring Key Archival and Recovery Process
234 Netscape Certificate Management System Administrator’s Guide • February 2003
b.
Use the command-line tool called
certutil
to retrieve the transport
certificate from the Data Recovery Manager’s certificate database. (For
information on the
certutil
tool, check this site:
http://www.mozilla.org/projects/security/pki/nss/tools/
First, go to this directory:
<server_root>/cert-<instance_id>/config
Next, run this command:
<server_root>/bin/cert/tools/certutil -L
-d . -n kraTransportCert cert-<instance_id> -a
The transport certificate appears. View the certificate information. Make
sure that the certificate you are looking at is the correct one; the certificate
shows the DN that was specified for the transport certificate during the
installation of Data Recovery Manager.
c.
Copy the base-64 encoded certificate, excluding the marker lines
-----BEGIN CERTIFICATE-----
and
-----END CERTIFICATE-----
, to a
text file. The copied information should look like the example below:
MIICDjCCAXegAwIBAgICAfMwDQYJKoZIhvcNAQEEBQAwdzELMAkGA1UEBhMCV
VMxLDAqBgNVBAoTI0
5ldHNjYXBlIENvbW11bmljYXRpb25zIENvcnBvcmF0aW9uMREwDwYDVQQLEwh
IYXJkY29yZTEnMCUG
A1UEAxMeSGFyZGNvcmUgQ2VydGlmaWNhdGUgU2VydmVyIElJMB4XDTk4MTExO
TIzNDIxOVoXDTk5MD
UxODIzNDIxOVowLjELMAkGA1UEBhMCVVMxETAPBgNVBAoTCG5ldHNjYXBlMQw
wCgYDVQQDEwNLUmEw
XDANBgkqhkiG9w0BAQEFAANLADBIAkEArrbDiYUI5SCdlCKKa0bEBn1m83kX6
bdhytRYNkdHB95B
2.
Update the JavaScript method in the enrollment form.
To do this:
a.
Go to the host system of the enrollment authority and locate the
user-enrollment form. The default forms are at these locations:
<server_root>/cert-<instance_id>/web-apps/ee ca
and
<server_root>/cert-<instance_id>/web-apps/ee/ra
b.
Open the enrollment form (ProfileSelect.template) that you want to use in
a text editor.
c.
In the form, locate the
generateCRMFRequest()
JavaScript method.
d.
Add a variable for the transport certificate.
Below the commented text, add this line:
var kraTransportCert =