Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 658 / 866

Configuring a Certificate Manager to Publish Certificates and CRLs
658 Netscape Certificate Management System Installation and Setup Guide • October 2001
Typically, you would want to enter the directory manager’s DN because it has
read-write permission to the entire directory tree (the root DN). For more
information on root DN, see Appendix A, “Distinguished Names” in CMS
Plug-ins Guide.
Password. Type the password for this DN. The Certificate Manager saves this
password in the single sign-on password cache and uses it during startup; for
details, see “Required Start-up Information” on page 312. (If you change the
password, the server updates the single sign-on password cache with the new
password.)
LDAP version. Select the version of LDAP protocol appropriate to your
version of Directory Server. If the directory you want the Certificate Manager
to publish to is based on Netscape Directory Server 1.x, select version 2. For
Directory Server versions 3.x and later, select LDAP version 3.
4.
To save your changes, click Save.
The server attempts to connect to the specified Directory Server. If the
information you specified is incorrect, the server displays an error message
and you will need to correct the information and save your changes again.
If the changes you made require you to restart the server, you will be
prompted accordingly. In that case, restart the server.
Step 6. Test Certificate and CRL Publishing
To test whether you’ve configured the Certificate Manager correctly to publish
certificates and CRLs to the directory, follow these steps:
• Step A. Decide a Directory Entry for Requesting a Certificate
• Step B. Request a Certificate
• Step C. Approve the Request
• Step D. Download the Certificate to the Browser
• Step E. Check if the Directory Has the Certificate
• Step F. Revoke the Certificate
• Step G. Check the Directory for the CRL