Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 803 / 866

Getting Server SSL Certificates for Netscape Servers
Chapter 24 Issuing and Managing Server Certificates 803
Step 3. Install Your Server’s SSL Certificate
To install the server SSL certificate on your server:
1.
Open a web browser window.
2.
Go to the Administration Server, and use the Server Selector to access the
Server Manager for your server.
3.
Follow the directions presented there to install the certificate.
In general, you will be required to specify or enter the following information:
❍
Whether the certificate is for this server. Be sure to select the option that
says the certificate is for this server.
❍
A name (or nickname) for the certificate. This name will be displayed in the
list of certificates installed on this server.
❍
The certificate, in base-64 encoded format. Open the email sent to you by
the CA, locate and copy the portion that begins with
-----BEGIN
CERTIFICATE-----
and ends with
-----END CERTIFICATE-----
, and
paste it into the text area in the form.
❍
The encryption alias. Enter the alias for your server.
4.
Follow the prompts and add the certificate to your server’s certificate database.
5.
Stop and restart Administration Server for the changes to take effect.
The server decrypts the message, extracts the certificate, and saves it to the
directory you specified.
Step 4. Accept a CA as Trusted in Your Server
In both Netscape clients and servers, CAs can be either trusted or untrusted. If a CA
is trusted, Netscape clients and servers accept the certificates that have been issued
by that CA. For the server to accept (during SSL client authentication) client
certificates that have been issued by Certificate Management System, you must
import its certificate chain into the certificate database of your server.
To view this chain in a format that can be used by Netscape servers:
1.
Go to the home page of Certificate Management System.
By default, the home page is at this location:
https://<hostname>:<end_entity_HTTPS_port>
2.
Click Accept “This Authority in Your Server.”