Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 751 / 866

Configuring Key Archival and Recovery Process
Chapter 22 Setting Up Key Archival and Recovery 751
field you must enter the recovery agent password you specified during
installation. Then in the remaining fields, allow the key recovery agent to enter
the new password information. If you have more than one key recovery agent,
repeat this procedure for all the agents.
Old Password. Type the current password for the key repository.
New Password. Type the new password for the key repository.
Confirm Password.
Retype the new password exactly as you typed it in the
previous field.
6.
Click OK.
You are returned to the Recovery Agent Password tab.
Configuring Key Archival and Recovery Process
By default, the Data Recovery Manager is not configured to archive or recover end
users’ encryption private keys. This section explains how to set up key archival and
recovery processes.
• Step 1. Set Up the Key Archival Process
• Step 2. Set Up the Key Recovery Process
• Step 3. Test Your Key Archival and Recovery Setup
Step 1. Set Up the Key Archival Process
Before proceeding with this section, you should have read “Key Archival Process”
on page 737. In particular, you should be familiar with how the key archival
process works. If you are not, see “How Key Archival Works” on page 739.
To set up the key archival process, follow these steps:
• Step A. Deploy Clients That Can Generate Dual Key Pairs
• Step B. Connect the Enrollment Authority and the Data Recovery Manager
• Step C. Customize the Certificate Enrollment Form
• Step D. Configure Key Archival Policies