Netscape NETSCAPE CONSOLE 6.0 - MANAGING SERVERS, Manual

Page: 182 / 302

Preparing to Use SSL and TLS Encryption
182 Managing Servers with Netscape Console • December 2001
An internal security device is made up of a key-pair and a certificate database stored
in a software file on a host computer. By default, Netscape Administration Server
provides a means to create an internal security device with its PKCS #11 module. If
you do not have an external device connected to your server or client, you can use
only the Netscape internal security device for SSL authentication.
An external security device is a key-pair and certificate database stored in an external
device such as a Smart Card. If you have an external device connected to your
server, you can use internal and external security devices for SSL authentication.
To Install an External Security Device
1.
Connect your Smart Card reader or other device and install its drivers on your
host machine.
Initially, the device will be available to all servers on the host. Depending on
the device’s capabilities, you may be able to share it across multiple servers on
the host. For more information, see the documentation that came with your
hardware.
2.
In the Netscape Console navigation tree, select the server instance that you
want to use the PKCS #11 module with, and then click Open.
3.
From the server’s Console menu, choose Security > Configure Security
Modules, and then click Install.
4.
In the Install Security Module dialog box, enter the following information:
Enter the PKCS #11 module driver filename. Enter the full path to the driver
file that came with your device. This file will have the extension
DLL
,
JAR
,
so
, or
sl
.
Enter an identifying name for this module. Enter a descriptive name that will
help you identify this device.
5.
Click OK, and then click Close.
To Remove an External PKCS #11 Module
1.
In the Netscape Console navigation tree, select the server instance that is using
the external PKCS #11 device, and then click Open.
2.
From the server’s Console menu, choose Security > Configure Security
Modules.
3.
Select your device from the list and then click Remove.
4.
Click OK to confirm that you want to remove the device, and then click Close.