Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 814 / 866

Setting up CEP Enrollment Manually
814 Netscape Certificate Management System Installation and Setup Guide • October 2001
• Stop the Certificate Manager and edit the configuration file to include the
following lines:
eeGateway.cep.cep1.appendDN=O=<BASE DN>
eeGateway.cep.cep1.createEntry=true
eeGateway.cep.cep1.entryObjectClass=cep
eeGateway.cep.cep1.url=/cgi-bin/pkiclient.exe
A description for each of the above parameters are provided in Table 25-1.
Table 25-1 CEP service-related configuration parameters in the configuration file
Parameter Description
appendDN
Specifies the DN component appended to the DN the router requests. You must have a
constant component in the DN which exists in the certificate to be able to publish.
createEntry
Specifies whether to create an entry in the directory before publishing the certificate.
Note that to publish a certificate, an entry must already exist for the DN in the directory.
• Enter
true
if you want the Certificate Manager to create an entry if one does not
already exist (
true
/
false
).
• Enter
false
if an entry already exists in the directory and you don’t want the server
to create one.
url
Specifies the URL for CEP enrollment. It is used if the router requests a subject name
such as
unstructuredAddress=1.2.3.4+unstructuredName=
fred.siroe.com
. You will need to append the DN to add-on
O=siroe.com
as
otherwise publishing to the directory will not work.