Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 228 / 866

Stage 2. Running the Installation Wizard
228 Netscape Certificate Management System Installation and Setup Guide • October 2001
6.
Key-Pair Information for Certificate Manager CA Signing Certificate. Select
the token to store the root CA signing certificate and key pair. If you have not
previously initialized the token’s password, you must do so in this screen. Also
specify the key type and length.
Click Next to continue.
7.
Message Digest Algorithm. Select the algorithm to use for computing the
certificate signature. The choices are: MD2, MD5, or SHA-1.
Click Next to continue.
8.
Subject Name for Certificate Manager CA Signing Certificate. Type values
for the subject DN components; these values identify the root CA signing
certificate.
Click Next to continue.
9.
Validity Period for Certificate Manager CA Signing Certificate.
Select the
validity period for the CA signing certificate. The default validity is two years.
The validity period determines how soon you will have to renew the
certificate, which can be a complex procedure.
Click Next to continue.
10.
Certificate Extensions for Certificate Manager CA Signing Certificate. Select
the required extensions. The default settings should work for most
deployments. If necessary, you can add an additional extension by pasting its
base-64 encoding in the space provided on this screen.
Certificate Management System provides command-line tools for generating
extensions to include in CA and other certificate requests. For details about
these tools, check this directory:
<server_root>/bin/cert/tools
Note that the certificate extension text field accepts a single extension blob. If
you want to add multiple extensions, you should use the
ExtJoiner
program,
which is also provided in the
tools
directory. For details on using the
ExtJoiner
program, see Chapter 5, “Extension Joiner Tool” of CMS
Command-Line Tools Guide.
Click Next to continue.
11.
Certificate Manager CA Signing Certificate Creation. Click Next to generate
and install the certificate.