Netscape NETSCAPE DIRECTORY SERVER 6.1 - ADMINISTRATOR, Administrator'S Manual

Page: 383 / 578

Obtaining and Installing Server Certificates
Chapter 11 Managing SSL 383
For a complete description of SSL, internet security, and certificates, check the
appendixes included in Managing Servers with Netscape Console.
Obtaining and Installing Server Certificates
This section describes the process of creating a certificate database, obtaining and
installing a certificate for use with your Directory Server, and configuring
Directory Server to trust the certification authority’s (CA) certificate.
This process is a necessary first step before you can turn on SSL in your directory. If
you have already completed these tasks, see “Activating SSL,” on page 387.
Obtaining and installing certificates consists of the following steps:
• Step 1: Generate a Certificate Request
• Step 2: Send the Certificate Request to the Certificate Authority
• Step 3: Install the Certificate
• Step 4: Trust the Certificate Authority
• Step 5: Confirm That Your New Certificates Are Installed
You will use the Certificate Request Wizard to generate a certificate request (Step 1)
and send it to a Certificate Authority (Step 2). You then use the Certificate Install
Wizard to install the certificate (Step 3), and to trust the Certificate Authority’s
certificate (Step 4).
These wizards automate the process of creating a certificate database, and of
installing the key-pair.
Step 1: Generate a Certificate Request
To generate a certificate request and send it to a CA:
1.
On the Directory Server Console, select the Tasks tab and click Manage
Certificates.
The Manage Certificates window is displayed.
2.
Select the Server Certs tab, and click the Request button.
The Certificate Request Wizard is displayed.
3.
Click Next.