Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 299 / 866

Cloning a Certificate Manager
Chapter 7 Installing and Uninstalling CMS Instances 299
Step 9. Test Clone-Master Connection
To test whether your clone-master CA setup is complete and functional, repeat
these steps for each clone Certificate Manager.
• Step A. Request a Certificate from the Clone CA
• Step B. Approve the Request
• Step C. Download the Certificate to the Browser
• Step D. Revoke the Certificate
• Step E. Check Master CA’s CRL for the Revoked Certificate
Step A. Request a Certificate from the Clone CA
The steps outlined below explain how to request a client certificate from the clone
Certificate Manager using the manual enrollment method. If you’ve configured the
clone Certificate Manager for automated certificate issuance, for example for
directory-based enrollment, you may use the appropriate form and request a
certificate.
To request a client or personal certificate from the clone Certificate Manager:
1.
Open a web browser window.
2.
Go to the end-entity interface of the Certificate Manager you configured (or to
the Registration Manager that’s connected to this Certificate Manager).
The URL is in this form:
https://<hostname>:<end_entity_HTTPS_port>
or
http://<hostname>:<end_entity_HTTP_port>
3.
In the left frame, under Browser, click Manual.
This opens the manual enrollment form.
4.
Fill in all the values and submit the request.
The client prompts you to enter the password for your key database.
5.
When you enter the correct password, the client generates the key pairs.
Do not interrupt the key-generation process.