Netscape Certificate Management System 6.2, Administrator'S Manual

Page: 108 / 874

Installing a Certificate Manager
108 Netscape Certificate Management System Administrator’s Guide • June 2003
❍
If you want the wizard to generate the certificate request in PKCS #10
format, select the “Generate PKCS10 request” option.
❍
If you want the wizard to generate the certificate request in CMC format,
select the “Generate CMC full enrollment request” option.
Click Next to generate the certificate or the request:
❍
If you chose to get the certificate signed by the subordinate CA itself, the
wizard generates the SSL server certificate. You’ll be presented with the
“Create Single Sign-on Password” screen (Step 35).
❍
If you chose to generate a request for submission to another CA, the
wizard generates an SSL server certificate request that you must submit to
another CA. You’ll be presented with the “Submission of Request” screen
(Step 30).
30.
Submission of Request.
Select whether you want to submit the request
manually or send the request automatically to a remote Certificate Manager.
❍
To automatically submit the request to a remote Certificate Manager (or for
automatic enrollment), follow these steps:
I.
Select the “Send the request to a remote CMS now” option.
II.
Enter the host name and end-entity port number of the remote
Certificate Manager, and specify whether the end-entity port is SSL
enabled.
III.
Click Next to submit the request.
The Certificate Request Result screen appears, confirming that the
request has been submitted. Note the request ID provided in the
response message. (You can use it later to retrieve the certificate, once
it has been issued, from the end-entity port.)
Note that the request gets added to the agent queue of the remote
Certificate Manager for approval by that Certificate Manager’s agent.
If you’ve permission to access that Certificate Manager’s Agent
interface, you can follow the instructions below to issue the certificate.
Otherwise, you should wait for the remote Certificate Manager’s agent
to approve your request and issue the certificate.
IV.
Open a web browser window.
V.
Enter the URL for the remote Certificate Manager’s Agent Services
page. (You must have a valid agent’s certificate.)
VI.
Select List Requests, click Show Pending Requests, and then click Find.