Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 450 / 866

Tokens for Storing CMS Keys and Certificates
450 Netscape Certificate Management System Installation and Setup Guide • October 2001
By default, the Online Certificate Status Manager uses a single SSL server
certificate for authentication purposes. However, you can request and install
additional SSL server certificates for the Online Certificate Status Manager. For
example, you can configure the Online Certificate Status Manager to use separate
server certificates for authenticating to Netscape Console and the Online Certificate
Status Manager Agent Services interface. For instructions, see “Configuring the
Server to Use Separate SSL Server Certificates” on page 478.
Remote Administration Server Certificate
Similar to the Certificate Manager and Registration Manager, the Online Certificate
Status Manager too uses a remote administration server certificate. For details, see
section “Remote Administration Server Certificate” on page 443.
Tokens for Storing CMS Keys and Certificates
A token is a hardware or software device that performs cryptographic functions
and optionally stores public-key certificates, cryptographic keys, and data defined
by the application using the cryptographic services. Alternatively, a token can also
be considered as a device that you can use to generate and store your key pairs and
corresponding certificates.
Certificate Management System defines two types of tokens, internal and external,
for storing key pairs and certificates that belong to the Certificate Manager,
Registration Manager, Data Recovery Manager, and Online Certificate Status
Manager.
NOTE
Only those who have the password that protects a token can access
it. For information on changing the password that protects a token,
use the command-line utility called the Key Database Tool, which is
explained in the CMS Command-Line Tools Guide. To locate an online
version of this document, see “Where to Go for Related
Information” on page 28.