Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 237 / 866

Stage 2. Running the Installation Wizard
Chapter 6 Installing Certificate Management System 237
18.
Key-Pair Information for SSL Server Certificate. Select the token to store the
SSL server certificate and key pair. If you have not previously initialized the
token’s password, you must do so in this screen. Also specify the key type and
length.
Click Next to continue.
19.
Message Digest Algorithm. Select the algorithm to use for computing the
certificate signature. The choices are: SHA-1, MD2, or MD5.
Click Next to continue.
20.
Subject Name for SSL Server Certificate. Type the values for the subject DN
components; these values identify the subordinate CA’s SSL server certificate.
The CN must be the fully-qualified host name of the machine on which you’re
installing the Certificate Manager.
Click Next to continue.
21.
Certificate Extensions for SSL Server Certificate. Select the required
extensions. The default settings should work for most deployments. If
necessary, you can add an additional extension by pasting its base-64 encoding
in the space provided on this screen. (For details, see Step 10 of this section.)
Click Next to continue.
22.
SSL Server Certificate Request Creation. This is an informational screen that
tells you that the wizard has all the information required to generate the key
pair and certificate request. In the previous screens, if you chose to generate a
certificate request and include the Subject Key Identifier extension in the
certificate, you’ll be given the choice to select the format for the certificate
request. Otherwise, the request format will be PKCS #10.
❍
If you want the wizard to generate the certificate request in PKCS #10
format, select the “Generate PKCS10 request” option.
❍
If you want the wizard to generate the certificate request in CMC format,
select the “Generate CMC full enrollment request” option.
Click Next to generate the certificate or the request:
❍
If you chose to get the certificate signed by the subordinate CA itself, the
wizard generates the SSL server certificate. You’ll be presented with the
“Create Single Signon Password” screen (Step 28).
❍
If you chose to generate a request for submission to another CA, the
wizard generates an SSL server certificate request that you must submit to
another CA. You’ll be presented with the “Submission of Request” screen
(Step 23).