Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 481 / 866

Configuring the Server’s Security Preferences
Chapter 14 Managing CMS Keys and Certificates 481
2.
Locate the CMS instance for the Certificate Manager, make sure it’s started,
and then log in to the CMS window of the Certificate Manager.
3.
Select the Configuration tab, and then select the Encryption tab.
4.
Click the Certificate Setup Wizard button to launch the wizard, which is
explained in “Certificate Setup Wizard” on page 456.
5.
Select the option to request a certificate and then follow the on-screen prompts
to generate a certificate request for the client certificate—in the Certificate
Selection window, select
Other
and specify
client
as the certificate type in the
associated text field.
6.
Once you have the certificate request ready, submit it to a CA so that it can
issue a certificate. For general instructions to use the wizard to request a
certificate, see section “Using the Wizard to Request a Certificate” on page 457.
7.
If you submitted the request to a Certificate Manager and if you have agent
privileges for that Certificate Manager, log in to its Agent Services interface,
locate the request, and check the request for required extensions. (If you
submitted the request to any other CA, you must ask the person managing that
CA to make the same changes to the request before approving it.)
Make sure that only the
SSL Client
option for certificate type is selected in the
request. For certificates with no Netscape Certificate Type extensions, the Key
Usage extension must be included with
Signing
and
Encryption
bits set.
8.
Approve the request.
9.
Once you have the certificate ready, restart the wizard and install the certificate
in the Certificate Manager’s database. For general instructions to use the
wizard to add a certificate, see “Using the Wizard to Install a Certificate or
Certificate Chain” on page 471.
Note that the default nickname for the certificate is
crlSigningCert cert-<instance_id>
, where
<instance_id>
identifies the
CMS instance in which the Certificate Manager is installed.
10.
After you’ve installed the certificate successfully, go to the Tasks tab and stop
the Certificate Manager.
11.
Configure the Certificate Manager to use this certificate.
After you install the certificate, configure the Certificate Manager to use the
new certificate for SSL client authentication to the publishing directory. For
instructions, see “Step 5. Identify the Publishing Directory” on page 656.