Netscape Certificate Management System 6.2, Administrator'S Manual

Page: 218 / 874

Installing a Standalone Data Recovery Manager
218 Netscape Certificate Management System Administrator’s Guide • June 2003
❍
Key Length. Available key sizes for RSA are 512, 768, 1024, 2048, 4096, or
Custom. Available key sizes for DSA are 512, 1024, or Custom (which must
be in increments of 64 bits only).
See “Key Type and Length” on page 215 for more information.
Click Next to continue.
10.
Subject Name for Data Recovery Manager Transport Certificate. Type the
values for the subject DN components; these values identify the transport
certificate.
Click Next to continue.
11.
Certificate Extensions for Data Recovery Manager Transport Certificate.
Select the required extensions. The default settings should work for most
deployments. If necessary, you can add an additional extension by pasting its
base-64 encoding in the space provided on this screen.
CMS provides command-line tools for generating extensions to include in CA
and other certificate requests. For details about these tools, check this directory:
<server_root>/bin/cert/tools
Note that the certificate extension text field accepts a single extension blob. If
you want to add multiple extensions, you should use the
ExtJoiner
program,
which is also provided in the
tools
directory. For details on using the
ExtJoiner
program, see Chapter 5, “Extension Joiner Tool” of CMS
Command-Line Tools Guide.
Click Next to continue.
12.
Data Recovery Manager Transport Certificate Request Creation.
This
informational screen tells you that the wizard has all the information required
to generate the key pair and certificate request. In the previous screen, if you
chose to include the Subject Key Identifier extension in the certificate, you’ll be
given the choice to select the format for the certificate request. Otherwise, the
request format will be PKCS #10.
❍
If you want the wizard to generate the certificate request in PKCS #10
format, select the “Generate PKCS10 request” option.
❍
If you want the wizard to generate the certificate request in CMC format,
select the “Generate CMC full enrollment request” option.
Click Next. The wizard generates the certificate request that you must submit
to a CA, which could be a remote Certificate Manager or a third-party CA.
13.
Submission of Request. Specify whether you want to submit the request
automatically or manually.