Netscape Certificate Management System 6.1, Руководство администратора

Страница: 178 / 840

Installing an Online Certificate Status Manager
178 Netscape Certificate Management System Administrator’s Guide • February 2003
❍
Key Length. Available key sizes for RSA are 512, 768, 1024, 2048, 4096, or
Custom. Available key sizes for DSA are 512, 1024, or Custom (which must
be in increments of 64 bits only).
See “Signing Key Type and Length” on page 175 for more information.
Click Next to continue.
10.
Subject Name for Online Certificate Status Manager Signing Certificate.
Type the values for the subject DN components; these values identify the
Online Certificate Status Manager’s signing certificate.
Click Next to continue.
11.
Online Certificate Status Manager Signing Certificate Request Creation.
This informational screen tells you that the wizard has all the information
required to generate the key pair and certificate request.
Click Next to generate them.
12.
Submission of Request. Select whether you want to submit the request
manually or send the request to a remote CMS manager (Certificate Manager
or Registration Manager) automatically. The wizard creates a certificate
request that you must submit to a CA.
❍
To automatically submit the request to a remote Certificate Manager (or for
automatic enrollment), follow these steps:
I.
Select the “Send the request to a remote CMS now” option.
II.
Enter the host name (for example,
host.domain.com
) and end-entity
port number of the Certificate Manager, then specify whether this
end-entity port uses SSL.
III.
Click Next to submit the request.
The Certificate Request Result screen appears, confirming that the
request has been submitted. Note the request ID provided in the
response message. (You can use it later to retrieve the certificate, once
the certificate has been issued, from the end-entity port.)
Note that your request gets added to the agent queue of the Certificate
Manager for approval by that Certificate Manager’s agent. If you’ve
permission to access that Certificate Manager’s Agent interface, you
can follow the instructions below to issue the certificate. Otherwise,
you should wait for the other agent to approve the request you
submitted and issue the certificate.
IV.
Open a web browser window.