Netscape Certificate Management System 6.1, Руководство администратора

Страница: 141 / 840

Installing a Registration Manager
Chapter 4 Registration Manager 141
10.
Network Configuration. Type the numbers for the ports to be used by the
CMS instance.
See “Registration Manager Interfaces” on page 137 for more information.
Click Next to continue.
11.
Key-Pair Information for Registration Manager Signing Certificate.
❍
Token. Enter either
internal
(if you plan to use the internal/software
token) or the name of an external token to store the Registration Manager
signing certificate and key pair. If you have not previously initialized the
token’s password, you must do so in this screen. See “Tokens,” on page 139
for more information.
❍
See “Tokens,” on page 139 for more information. Key Type. Choose RSA
or DSA.
❍
Key Length.
Available key sizes for RSA are 512, 768, 1024, 2048, 4096, or
Custom. Available key sizes for DSA are 512, 1024, or Custom (which must
be in increments of 64 bits only).
See “Signing Key Type and Length” on page 138 for more information.
Click Next to continue.
12.
Message Digest Algorithm. Select the algorithm to use for computing the
certificate signature. The choices are: SHA-1, MD2, or MD5.
Click Next to continue.
13.
Subject Name for Registration Manager Signing Certificate.
Type the values
for the subject DN components; these values identify the Registration
Manager’s signing certificate.
A DN is a series of name-value pairs that in combination uniquely identify an
entity. The subject DN identifies the Registration Manager signing certificate.
Click Next to continue.
14.
Certificate Extensions for Registration Manager Signing Certificate. Select
the required extensions. The default settings should work for most
deployments. If necessary, you can add an additional extension by pasting its
base-64 encoding in the space provided on this screen.
CMS provides command-line tools for generating extensions to include in CA
and other certificate requests. For details about these tools, check this directory:
<server_root>/bin/cert/tools