Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 505 / 866

Managing the Certificate Database
Chapter 14 Managing CMS Keys and Certificates 505
3.
Click Manage Certificate.
The Certificate Database Management window appears. The window lists all
the certificates for the selected instance of Certificate Management System; the
list is a table, with each certificate occupying a row.
4.
Select the CA certificate you want to delete, and click Delete.
5.
When prompted, confirm the delete action.
6.
Click Close.
You are returned to the Encryption tab.
7.
To save your changes, click Save.
The CMS configuration is modified. If the changes you made require you to
restart the server, you will be prompted accordingly. In that case, restart the
server.
Changing the Trust Settings of a CA Certificate
Certificate Management System relies on the CA certificates in its certificate
database for validating certificates it receives during an SSL-enabled
communication. For example, when a Certificate Manager is authenticating a
Registration Manager that has sent a certificate signing request, the Certificate
Manager checks its certificate database to see whether the CA that has signed the
certificate presented by the Registration Manager is included in the database as a
trusted CA.
You may need to change the status of a currently trusted CA to untrusted (or vice
versa) temporarily or permanently. For example, you may be notified that a CA is
experiencing technical difficulty that prevents certificate authentication. By making
the CA certificate untrusted, you can prevent entities whose certificates have been
signed by that CA from successfully authenticating to Certificate Management
System. You can then return the trust option to trusted when the CA notifies you
that the problem has been resolved.
If you want to untrust a CA permanently, you should consider removing its
certificate from the trust database altogether. For instructions, see “Deleting a
Certificate From the Certificate Database” on page 504.
Changing the trust setting changes the trust flag (or bit) in the CA certificate. To
change the trust setting of a CA certificate:
1.
Log in to the CMS window (see “Logging In to the CMS Window” on
page 343).