Netscape Certificate Management System 6.1, Administrator'S Manual, Page: 95 / 840

Installing a Certificate Manager
Chapter 3 Certificate Manager 95
For more information about extensions, see Appendix G, “Certificate and CRL
Extensions.”
Click Next to continue.
18.
Certificate Manager CA Signing Certificate Creation. Click Next to generate
and install the certificate.
19.
SSL Server Certificate. Select the “Sign SSL certificate with my CA signing
certificate” option. This option enables the wizard to generate an SSL Server
Certificate signed with the local CA signing certificate, the root Certificate
Manager’s CA signing certificate you just created.
Click Next to continue.
20.
Key-Pair Information for SSL Server Certificate.
❍
Token. Enter either
internal
(if you plan to use the internal/software
token) or the name of an external token. If you have not previously
initialized the token’s password, you must do so in this screen. See
“Tokens,” on page 91 for more information.
❍
Key Type. Choose RSA.
❍
Key Length.
Available key sizes for RSA are 512, 768, 1024, 2048, 4096, or
Custom. Available key sizes for DSA are 512, 1024, or Custom (which must
be in increments of 64 bits only).
See “Signing Key Type and Length” on page 88 for more information.
Click Next to continue.
21.
Message Digest Algorithm. Select the algorithm to use for computing the
certificate signature. The choices are: SHA-1, MD2, or MD5.
Click Next to continue.
22.
Subject Name for SSL Server Certificate. Type the values for the subject DN
components; these values identify the root CA’s SSL server certificate. The CN
must be the fully-qualified host name of the machine on which you’re
installing the Certificate Manager.
Click Next to continue.
23.
Validity Period for SSL Server Certificate. Select the validity period for the
SSL server certificate. The validity period determines how soon you will have
to renew the certificate.
Click Next to continue.