Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 452 / 866

Tokens for Storing CMS Keys and Certificates
452 Netscape Certificate Management System Installation and Setup Guide • October 2001
Step 2. Install the PKCS #11 Module
PKCS #11 is a standard set of APIs and shared libraries used by Netscape and a
number of encryption vendors. PKCS #11 isolates an application from the details of
the cryptographic device, thus enabling the application to provide a unified
interface for PKCS #11-compliant cryptographic devices.
The PKCS #11 module implemented in Certificate Management System (in
Netscape Administration Server) enables it to support cryptographic devices
supplied by many different manufacturers. Specifically, it allows Certificate
Management System to plug in shared libraries or DLLs supplied by
manufacturers of external encryption devices and use them for generating and
storing keys and certificates for the CMS managers.
There are two ways in which you can install a PKCS #11 module, by using the
interface provided within Netscape Console or by using the command-line utility
named
modutil
. Both the methods are documented below.
• To install the PKCS #11 module using Netscape Console:
a.
Log in to the CMS window (see “Logging In to the CMS Window” on
page 343).
b.
From the Console menu, choose Manage PKCS#11.
The PKCS #11 Management window appears.
c.
Click Add.
The Add PKCS #11 Module window appears.