Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 294 / 866

Cloning a Certificate Manager
294 Netscape Certificate Management System Installation and Setup Guide • October 2001
The setup process involves the following steps:
• Step A. Locate the Master CA’s SSL Server Certificate
• Step B. Create a Privileged-User Entry for Clone CAs
Step A. Locate the Master CA’s SSL Server Certificate
Depending on which CA issued/signed the master Certificate Manager’s SSL
server certificate, you can locate the certificate in either the internal database or the
certificate database (
cert7.db
file).
• If the issuer of the SSL server certificate is the master Certificate Manager itself,
you can locate the certificate in the internal database by going to the Retrieval
tab of the master Certificate Manager’s end-entity interface.
• If the issuer of the SSL server certificate is another CA, for example, a
third-party CA, you can locate the certificate in the certificate database by
using the
certutil
command-line tool. For more information about this tool,
see Chapter 11 , “Certificate Database Tool” of CMS Command-Line Tools Guide.
Follow the instructions that’s appropriate for you.
To locate the certificate in the Retrieval tab of the end-entity interface:
1.
Open web browser window.
2.
Go the master Certificate Manager’s end-entity interface. The URL is in
h
ttps://<hostname>:<SSL_port>
or h
ttp://<hostname>:<port>
format.
3.
Select the Retrieval tab, and in the left frame, click List Certificates.
4.
In the resulting form, click List.
A list of certificates appear.
5.
Locate the Certificate Manager’s SSL server certificate by looking at the subject
name of the certificate.
Typically, the SSL server certificate would be the second certificate.
6.
Click Details.
7.
In the resulting page, scroll to the section that says “Base 64 encoded
certificate” and shows the certificate in its base-64 encoded format.