Netscape Certificate Management System 6.2, Administrator'S Manual

Page: 319 / 874

Configuring the Server’s Security Preferences
Chapter 7 Administrative Basics 319
Configuring the Server to Use Separate SSL
Server Certificates
You can configure a CMS instance to use separate SSL server certificates for
authenticating to Netscape Console, the Agent Services interface, and the end
entity services interface.
This configuration involves the following steps:
• Step 1. Get the Required SSL Server Certificates
• Step 2: Update the Configuration
Step 1. Get the Required SSL Server Certificates
You must first request and install the required number of SSL server certificates for
the particular CMS instance. For instructions, see “Consideration When Getting
New Certificates for the Subsystems” on page 312.
Once you have installed the certificates, you should be able to see them in the list of
SSL server certificates in the Encryption tab of the CMS window.
Step 2: Update the Configuration
After you verify that the certificates are installed, configure the server as follows:
1.
Stop the CMS instance; see “Starting, Stopping, and Restarting CMS Instances”
on page 252.
2.
Go to this directory:
<server_root>/cert-<instance_id>/config
3.
In a text editor, open the
server.xml
file.
4.
Locate the
servercertnickname
parameter for the interface of your interest.
❍
To change the certificate used for authenticating to the Agent Services
interface, edit the value assigned to the
servercertnickname
parameter in
the
id="agent"
section.
❍
To change the certificate used for authenticating to the end-entity services
interface, edit the value assigned to the
servercertnickname
parameter in
the
id="ee_nonSSL"
section.
❍
To change the certificate used for authenticating to the SSL-enabled
end-entity services interface, edit the value assigned to the
servercertnickname
parameter in the
id="eeSSL"
section.