Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 705 / 866

Setting Up a Certificate Manager with OCSP Service
Chapter 21 Setting Up an OCSP Responder 705
3.
In the form that appears, select the “Show pending requests” option and click
Find.
4.
In the list of pending requests, identify the request you submitted and click
Details.
5.
Check the request to make sure that it has all the required attributes of a client
certificate, including the Authority Information Access extension.
6.
Scroll to the bottom of the request form, and approve the request.
You should see a confirmation page indicating that the certificate has been
issued. Don’t close the page until after you complete the next step.
Step D. Download the Certificate to the Browser
To download the certificate into the certificate database of Personal Security
Manager:
1.
In the confirmation page, scroll down to the section that says “Installing this
certificate in a client.”
2.
Check the certificate details for the required extensions.
3.
Follow the on-screen instructions and download the certificate to your
browser’s certificate database.
(An alternative way to download the certificate is to go to the Retrieval tab of
the end-entity services interface, search for the certificate, and download the
certificate.)
Step E. Make Sure the CA is Trusted by the Browser
When you downloaded the client certificate to the browser, the Certificate
Manager’s certificate chain also was downloaded to the browser’s certificate
database. Make sure that the Certificate Manager’s CA signing certificate is trusted
in the browser’s certificate database; this is required for proper chaining during
certificate validation.
1.
In the browser, open the Personal Security Manager interface.
In Communicator version 4.7, you can open this window by selecting
Communicator from the main menu, selecting Tools, and then selecting
Security Info.
2.
Select the Certificates tab and, in the left pane, click Authorities.
The list of CA certificates currently stored in the browser’s certificate database
appears.