Netscape Certificate Management System 6.2, Administrator'S Manual

Page: 96 / 874

Installing a Certificate Manager
96 Netscape Certificate Management System Administrator’s Guide • June 2003
10.
Internal OCSP Services. Select to enable the internal OCSP services.
See “Setting Up a Certificate Manager with OCSP Service,” on page 169 for
more information.
Click Next to continue.
11.
Network Configuration. Type the port numbers for the ports used by this
instance, or accept the defaults.
See “Certificate Manager Interfaces,” on page 91 for more information.
Click Next to continue.
12.
CA Signing Certificate. Select the “Create self-signed CA certificate” option.
Click Next to continue.
13.
Key-Pair Information for Certificate Manager CA Signing Certificate.
❍
Token. Enter either
internal
(if you plan to use the internal/software
token) or the name of an external token to store the Certificate Manager
signing certificate and key pair. If you have not previously initialized the
token’s password, you must do so now. See “Tokens,” on page 93 for more
information.
❍
Key Type. Choose RSA or DSA.
❍
Key Length. Available key sizes for RSA are 512, 768, 1024, 2048, 4096, or
Custom. Available key sizes for DSA are 512, 1024, or Custom (which must
be in increments of 64 bits only).
See “Signing Key Type and Length” on page 91 for more information.
Click Next to continue.
14.
Message Digest Algorithm. Select the algorithm to use for computing the
certificate signature. The choices are: MD2, MD5, or SHA-1.
Click Next to continue.