Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 460 / 866

Certificate Setup Wizard
460 Netscape Certificate Management System Installation and Setup Guide • October 2001
default only two certificate types are supported:
caCrlSigning
for the CRL
signing certificate (see “CRL Signing Key Pair and Certificate” on page 439)
and
client
for SSL client certificate (see “Getting an SSL Client Certificate for a
Subsystem” on page 480)
Step 3. Specify the Key-Pair Information
Specify the key-pair information for the certificate to be requested.
You need to identify the following:
• The token that contains the key pair for generating the certificate request—the
drop-down list shows the names of tokens currently installed for the selected
CMS instance; these are the tokens you can use now.
❍
The internal token is identified as internal. You should choose this option if
the key pair for the certificate you chose in the previous step is stored in
the local key database.
❍
The names of external tokens vary, matching the names specified when the
tokens were installed. You should choose this option if the key pair for the
certificate you chose in the previous step is in an external cryptographic
device. If you don’t see the token you want to use, exit from the wizard,
make sure the token is installed properly, restart the server, and repeat the
process. For information on using or installing external tokens, see
“Installing External Tokens” on page 451.