Netscape Certificate Management System 6.1, Руководство администратора

Страница: 109 / 840

Installing a Certificate Manager
Chapter 3 Certificate Manager 109
❍
If you noted the request ID of your request and know the host name and
end-entity port number of the remote Certificate Manager that issued the
certificate, select the “The certificate is at the CMS server where the request
was sent” option and then specify the required details.
Click Next to continue.
33.
Certificate Details. This is an informational screen that displays the certificate
so you can inspect its contents. Notice the nickname assigned to the certificate
and verify that you’re installing the correct certificate.
Click Next to continue.
34.
Import Certificate Chain. This screen appears only if you need to import the
CA certificate chain. If the CA that issued the certificate is a Certificate
Manager, follow these steps:
a.
Go to the end-entity URL for the remote Certificate Manager that issued
the SSL server certificate.
b.
Select the Retrieval tab, and then in the left-hand frame, click Import CA
Certificate Chain.
c.
Select the “Display the CA certificate chain in PKCS#7 for importing into a
server” option, and then click Submit.
d.
In the resulting form, locate the CA certificate chain, in its base-64 encoded
format, to the clipboard.
e.
Return to the Installation Wizard.
f.
Paste the certificate chain into the text box.
Click Next to continue.
35.
Single Sign-on Summary.
Check the summary and select whether to retain or
delete the
password.conf
file. For details, see “Token Password Storage” on
page 252.
Click Next to continue.
36.
Configuration Status. This screen should indicate that your configuration has
been successful.
Click Done to exit the Installation Wizard.
37.
You now need to create the first agent user for the Certificate Manager. See
“Agent Certificates,” on page 337 for details.