Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 702 / 866

Setting Up a Certificate Manager with OCSP Service
702 Netscape Certificate Management System Installation and Setup Guide • October 2001
3.
Make sure the following values are assigned:
Enable. Checked or selected.
predicate. Shows
HTTP_PARAMS.certType==client
.
critical. Unchecked.
numADs. Shows
1
.
ad0_method. Shows
ocsp
or
1.3.6.1.5.5.7.48.1
.
ad0_location_type. Shows
URL
.
ad0_location. Shows the complete path to the location where the Certificate
Manager listens to calls from OCSP-compliant clients. The path should be in
this format:
http://<hostname>:<nonSSL_end_entity_port>/ocsp
If the end-entity port number is 80, you need not specify it in the URL. For
example, if the hostname of your Certificate Manager is
demoCA.siroe.com
and the end-entity port number is 8000, the URL to type in the field would be:
http://demoCA.siroe.com:8000/ocsp
If you need details about any of the configuration parameters, click the Help
button.
4.
Click OK.
You are returned to the Policy Rules Management tab.
5.
Make any other policy changes, if necessary.
6.
Click Refresh.
The Certificate Manager is ready to request client certificates with Authority
Information Access extension.
Step 6. Restart the Certificate Manager
For all your changes to take effect, you must restart the Certificate Manager. You
can use the CMS window to restart the Certificate Manager.
1.
Select the Tasks tab.
2.
Click Restart the Server.
When you restart Certificate Management System, you are prompted to supply
the single sign-on password for the server.