Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 626 / 866

Configuring a Certificate Manager to Publish Certificates and CRLs
626 Netscape Certificate Management System Installation and Setup Guide • October 2001
The choices for submitting the CSR to the CA include the following:
To CA’s email address. Select this if you want to send the CSR to the CA
administrator’s email address. Type the administrator’s email address (for
example,
jdoe@siroe.com
) in the adjoining field. The administrator will
then be required to submit the request to the CA by pasting the CSR in the
CA’s server enrollment form.
To CA’s URL. Select this if you want to submit the CSR to the Certificate
Manager directly. Depending on the end-entity port that’s enabled, type
either of the following URL:
http://<CA_hostname>:<end_entity_port>/enrollment
or
https://<CA_hostname>:<end_entity_SSL_port>/enrollment
Note that the request submitted to the CA’s URL gets queued for approval
by the Certificate Manager agent.
e.
When the wizard displays the CSR, if you are running the wizard on a
Windows NT system, copy the CSR (displayed in its base-64 encoded
format) to a text file. The information you copied should look similar to the
sample shown below. Do not make any changes to it. (As indicated in the
message, a copy of this information is also saved to the
/temp
file in the
host machine’s file system.)
-----BEGIN NEW CERTIFICATE REQUEST-----
MMIIBnzCCAQgCAQAwXzELMAkGA1UEBhMCVXMxEzARBgNVBAgTCkNBTElGT1JOSUExHTAbBgNVBAopM
E5ldHNjYXBlIENvbW0uIENvcnAuMRwwGgYDVQQDExNzdXByaXlhLW50Lm1jb20uY29tMIGfMA0GCSG
SIb3DQEBAQUAA4GNADCBiQKBgQCk49jBib3SZQqTt5YtIGugnVOq38Y1CcB9DIow8MUVWG
RUT38mcX0lfpNT4hzW1aePiHersIMZFLxRgel0kEtJ0ClWfNQKzrnOfpL1H3CjcLjSM5hWaFt0M5hf
ZEtPk+XBsMbu3dCtbRacxs0Mkp24ePvqD8QIDAQABoA
-----END NEW CERTIFICATE REQUEST-----
3.
Submit the request to a CA and get the SSL server certificate.
If you decided to submit the certificate request to an external CA, you need to
go to that CA’s enrollment area and use the form provided for requesting SSL
server certificates. After you submit the request, hold on to the confirmation
message until you receive the certificate. When the CA sends the certificate to
you, complete the remaining configuration, starting from Step 6 on page 628.
The instructions in this step explain how to request the SSL server certificate
from the Certificate Manager manually. You should complete this step if you
didn’t use the auto-submit feature of the wizard to directly send the CSR to the
Certificate Manager’s URL.
To submit the request to the Certificate Manager manually:
a.
Open a web browser window.