Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 227 / 866

Stage 2. Running the Installation Wizard
Chapter 6 Installing Certificate Management System 227
Installing the Certificate Manager as a Root CA
To install the Certificate Manager as a root CA:
1.
Subsystems.
Select Certificate Manager. If you want the Certificate Manager to
issue certificates for wireless applications, select the “In addition to X.509 v3
certificates, do you want the Certificate Manager to support issuance of
Wireless Transport Layer Support (wTLS)-compliant certificates” option.
Otherwise, leave the option unchecked. (If you select the option, the end-entity
interface will include two forms for requesting certificates for wireless
applications and an option for downloading the wireless CA certificate.)
Click Next to continue.
2.
Remote Data Recovery Manager. Select the appropriate options:
❍
Select No, if you don’t want to connect the Certificate Manager to a remote
Data Recovery Manager.
❍
If you have already installed a remote Data Recovery Manager that you
want the Certificate Manager to use for archiving end users’ encryption
private keys, select Yes. Then, enter the remote Data Recovery Manager’s
host name and agent SSL port number in the associated fields.
Click Next to continue.
3.
Network Configuration. Type the port numbers for the ports to be used by the
CMS instance. If you want to enable the non-SSL end-entity port, be sure to
check the “Enable” checkbox.
Click Next to continue.
4.
CA’s Serial Number Range. Specify range for the serial numbers. In the
“Starting serial number” field, type the lowest serial number the CA should
assign to a certificate. If you plan to only use one CA server, you can leave the
“Ending serial number” field blank to indicate no upper limit. If you plan to
clone the CA to distribute load, you must specify an upper limit. (For cloned
CAs, you must make sure that the range of serial numbers does not overlap
with any other CA server.)
Click Next to continue.
5.
CA Signing Certificate. Select the “Create self-signed CA certificate” option.
Click Next to continue.