Netscape Certificate Management System 6.2, Administrator'S Manual

Page: 144 / 874

Installing a Registration Manager
144 Netscape Certificate Management System Administrator’s Guide • June 2003
19.
Certificate Details. This is an informational screen that displays the certificate
so you can inspect its contents. Notice the nickname assigned to the certificate
and verify that you’re installing the correct certificate.
Click Next to continue.
20.
Import Certificate Chain. This screen appears only if you need to import the
CA certificate chain. If the CA that issued the certificate is a Certificate
Manager, follow these steps:
a.
Go to the end-entity URL for the remote Certificate Manager that issued
the Registration Manager’s signing certificate.
b.
Select the Retrieval tab, and in the left-hand frame, click Import CA
Certificate Chain.
c.
In the resulting form, select the “Display the CA certificate chain in
PKCS#7 for importing into a server” option, and then click Submit.
d.
In the resulting page, locate the CA certificate chain in its base-64 encoded
format, and copy the certificate chain to the clipboard.
e.
Return to the Installation Wizard.
f.
Paste the certificate chain into the text box.
Click Next to continue.
21.
Key-Pair Information for SSL Server Certificate.
❍
Token. Enter either
internal
(if you plan to use the internal/software
token) or the name of an external token to store the SSL server certificate
and key pair. If you have not previously initialized the token’s password,
you must do so in this screen. See “Tokens,” on page 137 for more
information.
❍
Key Type. Choose RSA.
❍
Key Length. Available key sizes for RSA are 512, 768, 1024, 2048, 4096, or
Custom. Available key sizes for DSA are 512, 1024, or Custom (which must
be in increments of 64 bits only).
See “Signing Key Type and Length” on page 136 for more information.
Click Next to continue.
22.
Message Digest Algorithm. Select the algorithm to use for computing the
certificate signature. The choices are: SHA-1, MD2, or MD5.
Click Next to continue.