Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 469 / 866

Certificate Setup Wizard
Chapter 14 Managing CMS Keys and Certificates 469
4.
Click the Enrollment tab.
5.
In the menu list, click the appropriate link:
❍
If the CSR is for a subordinate CA certificate, in the Server section, click the
Certificate Manager link.
❍
If the CSR is for a Registration Manager’s signing certificate, in the Server
section, click the Registration Manager link.
❍
If the CSR is for a Certificate Manager’s OCSP signing certificate or Online
Certificate Status Manager’s signing certificate certificate, in the Server
section, click the OCSP Responder link.
❍
If the CSR is for an SSL server certificate or remote administration server
certificate, in the Server section, click the SSL Server link.
6.
In the form that appears, enter the required information and paste the CSR
from either the clipboard or text file.
For information on how a form works, click the Help button provided on the
form. Be sure to include the marker lines,
-----BEGIN NEW CERTIFICATE
REQUEST-----
and
-----END NEW CERTIFICATE REQUEST-----
.
7.
Submit the request.
8.
When the CA sends you a response, save the information in a text file for
future reference or inquiry.
Note that the you submitted gets queued for agent approval—an agent needs
to process and approve the certificate request, which the CA signs then and
delivers back to the email address specified in the request. You can contact the
CA agent to find out when the certificate will be delivered to you. If you have
agent privileges to the Certificate Manager, you can approve the request
yourself.
9.
When you receive the certificate from the CA, you’ll need to install it following
the instructions in “Using the Wizard to Install a Certificate or Certificate
Chain” on page 471.
Sending the CSR to an External CA
An external CA is any public or third-party CA. Before sending the CSR to a public
CA, make sure that the CA can issue the certificate you want to request. Also, it is a
good idea to read the policy statement published by a CA to see whether the CA
imposes any restrictions on the validity period or usage of the certificate.