Netscape Certificate Management System 6.2, Administrator'S Manual

Page: 139 / 874

Installing a Registration Manager
Chapter 4 Registration Manager 139
10.
Network Configuration. Type the numbers for the ports to be used by the
CMS instance.
See “Registration Manager Interfaces” on page 135 for more information.
Click Next to continue.
11.
Key-Pair Information for Registration Manager Signing Certificate.
❍
Token. Enter either
internal
(if you plan to use the internal/software
token) or the name of an external token to store the Registration Manager
signing certificate and key pair. If you have not previously initialized the
token’s password, you must do so in this screen. See “Tokens,” on page 137
for more information.
❍
See “Tokens,” on page 137 for more information. Key Type. Choose RSA
or DSA.
❍
Key Length.
Available key sizes for RSA are 512, 768, 1024, 2048, 4096, or
Custom. Available key sizes for DSA are 512, 1024, or Custom (which must
be in increments of 64 bits only).
See “Signing Key Type and Length” on page 136 for more information.
Click Next to continue.
12.
Message Digest Algorithm. Select the algorithm to use for computing the
certificate signature. The choices are: SHA-1, MD2, or MD5.
Click Next to continue.
13.
Subject Name for Registration Manager Signing Certificate.
Type the values
for the subject DN components; these values identify the Registration
Manager’s signing certificate.
A DN is a series of name-value pairs that in combination uniquely identify an
entity. The subject DN identifies the Registration Manager signing certificate.
Click Next to continue.
14.
Certificate Extensions for Registration Manager Signing Certificate. Select
the required extensions. The default settings should work for most
deployments. If necessary, you can add an additional extension by pasting its
base-64 encoding in the space provided on this screen.
CMS provides command-line tools for generating extensions to include in CA
and other certificate requests. For details about these tools, check this directory:
<server_root>/bin/cert/tools