Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 391 / 866

Privileged-User Types and Responsibilities
Chapter 13 Managing Privileged Users and Groups 391
2.
Depending on how your Certificate Management System is configured for
certificate issuance, one of the following events happen:
❍
If Certificate Management System is configured for manual certification,
an issuing agent must process the request and approve it for issuance.
Once the request is approved, the server issues the client certificate to the
user.
❍
If Certificate Management System is configured for automated certification
and the request passes authentication and policy checks, the server
automatically issues the client certificate to the user.
3.
When the user receives the certificate, the user must import the certificate into
the web browser that he or she will use to access the subsystem. It is a good
idea to ask the user to inform you that the certificate has been installed.
4.
After the user imports the certificate into the web browser, you need to copy
the certificate (in base-64 encoded form) in order to be able to add it to a
subsystem’s internal database.
To copy an agent’s certificate:
1.
Open a web browser window.
2.
Go to the Certificate Management System home page for end entities (by
default, it is called End Entity Registration Services).
The default URL for this page is in this form:
http://<host_name>:<end_entity_HTTP_port>
or
https://<host_name>:<end_entity_HTTPS_port>
In both cases, the
<host_name>
must be in this form:
<machine_name>.<your_domain>.<domain>
For example, the URL may look like this:
https://testCA.siroe.com
3.
Click the Retrieval tab.
4.
In the left frame, click either the List Certificates or Search For Certificates link,
and search for the user’s certificate.
5.
In the page listing the results of your search, click the Details button (next to
the corresponding user’s entry) to see detailed information about the
certificate.
6.
Scroll down to the section named “Installing This Certificate in a Client,”
which contains the user’s certificate in base-64 encoded form.