Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 293 / 866

Cloning a Certificate Manager
Chapter 7 Installing and Uninstalling CMS Instances 293
To configure a clone Certificate Manager:
1.
Log in to or go to Netscape Console that shows the clone Certificate Manager
instance.
2.
In the navigation tree, locate the instance ID for the clone you created, and
double-click the instance.
The CMS Installation Wizard starts.
3.
Follow the on-screen instructions to finish configuring the clone CA. During
configuration, be sure to follow these:
❍
Clone key and certificate materials —On this screen, click Yes to reuse the
certificate and key material in the database files you copied from the
master Certificate Manager. In the Instance Name field enter the instance
ID of the master Certificate Manager. Select the token name where the keys
and certificate are stored and enter the token’s password, if required.
❍
Clone key and certificate materials —On this screen, you choose whether
to reuse the master Certificate Manager’s SSL server certificate or create a
new one. If you created the clone Certificate Manager on the same host as
the master Certificate Manager, you can reuse the SSL server certificate. To
reuse the SSL server certificate, select Yes, enter the instance ID of the
master Certificate Manager, select a token, and enter the token password.
If you do not or cannot reuse the SSL server certificate, select No and
follow the screens that enable you to generate a new SSL server certificate.
❍
CA’s serial number range —On this screen, specify the lowest serial
number the CA should assign to certificates it creates in the “Starting serial
number” field. In the “Ending serial number” field, specify the highest
serial number available for this CA. For both the fields, you can enter the
number in decimal or hexadecimal (0xnn).
4.
Repeat steps 1 through 3 for each clone Certificate Manager.
Step 8. Establish Trust Between Master CA and
Clone CAs
For the master Certificate Manager to trust the clone Certificate Manager, you
associate the clone Certificate Manager as a trusted manager to the master Certificate
Manager. For details about trusted managers, see “Trusted Managers” on page 394.