Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 206 / 866

Data Recovery Manager Configuration
206 Netscape Certificate Management System Installation and Setup Guide • October 2001
• Key usage (No)_____________
If you decide to include the key usage extension, the
keyEncipherment
key
usage bit is set by default.
• Additional Extension (No)___________________________
To add extensions not included by default by Certificate Management System,
you will need to paste the base64 encoding of a sequence of extensions into the
wizard.
Transport Certificate Request
If you are obtaining your transport certificate from a remote CA, you need to know
where to submit your certificate request.
If you are submitting your transport certificate request to a third-party CA, follow
the instructions provided by that CA.
If you are submitting your certificate request to a Certificate Manager, you need to
know its URL:
• End-entity URL for issuing Certificate Manager___________________________
Enter the URL for the end-entity gateway of the Certificate Manager that will
issue the transport certificate. For example,
http://<hostname>:17006
.
Storage Key and Recovery Agent Configuration
Storage Key Creation
Specify the length of the key that the Data Recovery Manager uses to encrypt
end-entity encryption keys for storage.
• Storage key length___________________
The options available are 512, 1024, 2048, or 4096.
Data Recovery Scheme—1
The number of agents you enter here is determined by your organization’s policies
with respect to data recovery. If you enter a larger number than the default of 2 for
the number of recovery agents required to recover a key, you’re reducing the
chances of inappropriate recovery but increasing the complexity of the recovery
process.