Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 502 / 866

Managing the Certificate Database
502 Netscape Certificate Management System Installation and Setup Guide • October 2001
Managing the Certificate Database
Each CMS instance has a certificate database (
cert7.db
), which is maintained in its
internal token. This database contains certificates belonging to the subsystems
installed in the CMS instance (see “Keys and Certificates for the Main Subsystems”
on page 436) and various CA certificates the subsystems use for validating the
certificates they receive.
Whether you use an internal token or an external token for generating and storing
key pairs, Certificate Management System always maintains its list of trusted and
untrusted CA certificates in its internal token.
You may need to add new certificates to the database, remove unwanted
certificates from the database, or change the trust settings of CA certificates in the
database. This section explains how to view the contents of the certificate database,
delete unwanted certificates, and change the trust settings of CA certificates
installed in the database using the CMS window. For information on adding
certificates to the database, see “Certificate Setup Wizard” on page 456.
Viewing the Certificate Database Content
Each CMS instance has a certificate database that contains the list of certificates the
server uses. To view the contents of the database:
1.
Log in to the CMS window (see “Logging In to the CMS Window” on
page 343).
NOTE Certificate Management System also provides a command-line
utility called
certutil
for managing its certificate database. For
details, check CMS Command-Line Tools Guide.