Configuring the Certificate Manager
Chapter
3
Certificate Manager
117
Setting Up a Mail Server
If the subsystem will be sending out email notifications, you can configure the
subsystem to use a mail server, see “Mail Server,” on page 259.
Changing the Certificate Issuance Rules
You can change some of the rules about certificate issuance that were either
determined during installation, or are the system defaults. These include:
•
Whether certificates can be issued that are for validity periods longer than the
Certificate Managers CA signing certificate, the default is to not allow.
•
The serial number range the CA is able to use to issue certificates.
•
The signing algorithm used to sign certificates.
To change the certificate issuance rules:
1.
In the CMS window, select the Configuration tab.
2.
In the navigation tree, select Certificate Manager.
The General Setting tab appears.
3.
Change the following fields in this tab:
Override validity nesting requirement.
Specifies if the Certificate Manager
can issue certificates with validity periods beyond that of its CA signing
certificate.
If deselected and the Certificate Manager (CA) receives a request with validity
period extending beyond that of its CA signing certificate, it automatically
truncates the validity period to end on the day the CA signing certificate
expires.
Validity periods of certificates during enrollment is determined by the
ValidityConstraints
plug-in module, “ValidityConstraints,” on page 508.
Similarly, validity periods of certificates during renewal is determined by the
RenewalValidityConstraints
plug-in module, see
“RenewalValidityConstraints,” on page 501.
Certificate Serial Number.
Specifies the serial number range for certificates
issued by this Certificate Manager. The server assigns the serial number you
enter in the “Next serial number” to the next certificate it issues and the
number you enter in the “Ending serial number” to the last certificate it issues.
Содержание Certificate Management System 6.1
Страница 1: ...Administrator s Guide Netscape Certificate Management System Version6 1 February 2003...
Страница 28: ...Documentation 28 Netscape Certificate Management System Administrator s Guide February 2003...
Страница 68: ...Support for Open Standards 68 Netscape Certificate Management System Administrator s Guide February 2003...
Страница 82: ...Uninstalling CMS 82 Netscape Certificate Management System Administrator s Guide February 2003...
Страница 166: ...How a Registration Manager Works 166 Netscape Certificate Management System Administrator s Guide February 2003...
Страница 382: ...ACL Reference 382 Netscape Certificate Management System Administrator s Guide February 2003...
Страница 566: ...Managing Policy Plug in Modules 566 Netscape Certificate Management System Administrator s Guide February 2003...
Страница 710: ...1 3 Organization Security Policies 710 Netscape Certificate Management System Administrator s Guide February 2003...
Страница 716: ...Object Identifiers 716 Netscape Certificate Management System Administrator s Guide February 2003...
Страница 762: ...DNs in Certificate Management System 762 Netscape Certificate Management System Administrator s Guide February 2003...
Страница 794: ...Managing Certificates 794 Managing Servers with Netscape Console December 2001...
Страница 810: ...The SSL Handshake 810 Managing Servers with Netscape Console December 2001...
Страница 828: ...828 Netscape Certificate Management System Administrator s Guide February 2003...