Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 696 / 866

Setting Up a Certificate Manager with OCSP Service
696 Netscape Certificate Management System Installation and Setup Guide • October 2001
• Read “Publishing of CRLs” on page 610. Determine whether you want the
Certificate Manager to publish version 1 or version 2 CRLs to the directory. If
you decide to publish version 2 CRLs, read Chapter 4, “Certificate Extension
Plug-in Modules” of CMS Plug-ins Guide and determine the CRL extensions
you want the Certificate Manager to set; you will be required to configure the
server to set these extensions.
Step 2. Install OCSP-Compliant Client
If you don’t want to install Personal Security Manager, skip to the next step, “Step
5. Configure Certificate Manager for Required Extension Policies” on page 721.
If you decided to install Personal Security Manager:
1.
Download the latest version of Personal Security Manager from the web site to
the machine on which you have Netscape Communicator, version 4.7x,
installed.
2.
Locate the Release Notes (
release_notes.html
). It explains how to install the
product and lists known issues and restrictions. You must read this first for
installation instructions.
Make sure you also have the
cmcjavascriptapi.html
file handy. It describes
a JavaScript API for performing user certificate management operations within
a client. The JavaScript runs in the context of an enrollment page served by a
Certificate Manager or Registration Manager, enabling it to instruct the client
to perform PKI operations, such as key generation, certificate-request
generation, key archival, import of user certificates, key recovery, and
revocation requests. You’ll need to refer to this when setting up a Data
Recovery Manager for key archival and recovery, which is covered in Chapter
22, “Setting Up Key Archival and Recovery.”
3.
Follow the instructions in the release notes and install the product.
For example, in a Windows NT system, you can install Personal Security
Manager by entering the path to the
psm14_win32.jar
file in the browser’s
URL area. On a Solaris system, you can unzip the file by running
gunzip
psm_14_solaris2.6.tar.gz
, untar the file by running
tar xvf
psm14_solaris2.6.tar
, and then install Personal Security Manager by
running
psm-install
.