Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 491 / 866

Getting New Certificates for the Subsystems
Chapter 14 Managing CMS Keys and Certificates 491
7.
Go to the Certificate Manager’s agent interface.
The URL is in this format:
https://<hostname>:<agent_port>
8.
Enter all the information and request a new certificate.
If you need more information on getting the first agent certificate, see “Stage 3.
Enrolling for Administrator/Agent Certificate” on page 275.
9.
Once you get the certificate, install it in your browser.
10.
Access the Certificate Manager’s agent interface using your new certificate.
Deploying Registration Manager’s Signing Certificate
If you installed a new Registration Manager signing certificate, you must also
install this certificate in the certificate database of all subsystems (Certificate
Manager, Registration Manager, and Data Recovery Manager) that trust this
Registration Manager.
Here’s what you must do:
1.
Install the new signing certificate in the subsystems’ certificate databases.
Because the Registration Manager uses its signing certificate for SSL client
authentication to the subsystems, you must add the new signing certificate to
the internal database of all subsystems that have been configured to receive
requests from the Registration Manager.
To add the new certificate to a subsystem’s internal database:
❍
Note the instance ID and host name of the Registration Manager for which
you got the new signing certificate; this information will help you to
identify the Registration Manager in a subsystem’s list of privileged users.
❍
Copy the new signing certificate, in base-64 encoded format, to a text file.
❍
Add the new certificate to the individual subsystem’s internal database
following the instructions in “Changing a Privileged User’s Certificate” on
page 430. Repeat this step for all subsystems that receive requests from this
Registration Manager.