Netscape Certificate Management System 6.1, Administrator'S Manual

Page: 405 / 840

Automated Enrollment
Chapter 9 Authentication 405
The Select Authentication Plug-in Implementation window appears.
4.
Select the
CMCAuth
plug-in module.
5.
Click Next.
The Authentication Instance Editor window appears.
6.
If you don’t want to use the default instance name, in the Authentication
Instance ID field, type a unique name for this instance that will help you
identify it. If you chose to use a different name, be sure to edit the default name
in the enrollment forms.
There are no configuration options for this plug-in; it simply enables this
functionality.
7.
Click OK. The authentication instance is now set up and enabled.
CMC Enroll Utility
The CMC Enroll utility,
CMCEnroll
, is used to sign a certificate request with an
agent’s certificate. It is installed along with CMS and is available in the following
directory:
<server_root>/bin/cert/tools
This utility has the following syntax:
CMCEnroll -d<directory_containing_agent_cert> -h<db_password> -n<the
certificate_common_name> -r<certificate_request_file>
-p<certificate_DB_passwd> [-c]
where
Note: Surround values that include spaces in quotation marks.
-d
The location of the directory containing the
cert8.db
,
key3.db
, and
secmod.db files
associated with the agent certificate.
-h
Password to the database specified in the
-d
option.
-n
The common name of the certificate.
-
r
The file name of the certificate request.
-p
The password to the browser certificate database.
-c
To optionally include any comments about the request.