Netscape Certificate Management System 6.2, Administrator'S Manual

Page: 236 / 874

Configuring Key Archival and Recovery Process
236 Netscape Certificate Management System Administrator’s Guide • June 2003
Step E. Configure Key Recovery Policies
This step is optional.
Unlike Certificate Manager and Registration Manager, no policy plug-in modules
are provided for the Data Recovery Manager. If you have implemented any custom
policies for the Data Recovery Manager’s key recovery process, you should make
sure that they are configured properly. For details on configuring policies for a
subsystem, see “Configuring Policy Rules for a Subsystem” on page 489.
Step 3. Test Your Key Archival and Recovery
Setup
The steps outlined in this section explain how to verify key archival and recovery
process using Netscape Communicator 4.7 with Personal Security Manager,
version 1.01.
Step A. Test Your Key Archival Setup
To test whether you can successfully archive a key, follow these instructions.
1.
Enroll for dual certificates.
To do this:
a.
Open a web browser window.
b.
Go to the end-entity interface for the enrollment authority.
The default URL is as follows:
https://<hostname>:<end_entity_HTTPS_port>
or
http://<hostname>:<end_entity_HTTP_port>
c.
In the end-entity interface, open the enrollment form you customized in
“Step C. Customize the Certificate Enrollment Form” on page 229.
(Perform a “View Source” to ensure that the browser loads the correct page
with the JavaScript method you edited.)
d.
Fill in all the values and submit the request.
The client prompts you to enter the password for your key database.
e.
When you enter the correct password, the client generates the key pairs.
Do not interrupt the key-generation process.