Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 231 / 866

Stage 2. Running the Installation Wizard
Chapter 6 Installing Certificate Management System 231
3.
Network Configuration. Type the port numbers for the ports to be used by the
CMS instance. If you want to enable the non-SSL end-entity port, be sure to
check the “Enable” checkbox.
Click Next to continue.
4.
CA’s serial number range. Specify range for the serial numbers. In the
“Starting serial number” field, type the lowest serial number the CA should
assign to a certificate. If you only use one CA server, you can leave the “Ending
serial number” field blank to indicate no upper limit. If you plan to clone the
CA to distribute load, you must specify an upper limit. (For cloned CAs, you
must make sure that the range of serial numbers does not overlap with any
other CA server.)
Click Next to continue.
5.
CA Signing Certificate.
Select the “Create subordinate CA certificate request”
option.
Click Next to continue.
6.
Key-Pair Information for Certificate Manager CA signing certificate. Select
the token to store the CA signing certificate and key pair. If you have not
previously initialized the token’s password, you must do so in this screen. Also
specify the key type and length.
Click Next to continue.
7.
Message Digest Algorithm. Select the algorithm to use for computing the
certificate signature. The choices are: MD2, MD5, or SHA-1.
Click Next to continue.
8.
Subject Name for Certificate Manager CA Signing Certificate. Type values
for the subject DN components; these values identify the subordinate CA
signing certificate.
Click Next to continue.
9.
Validity Period for Certificate Manager CA Signing Certificate. Select the
validity period for the subordinate CA signing certificate. The default validity
is two years. The validity period determines how soon you will have to renew
the certificate, which can be a complex procedure.
Click Next to continue.