Netscape Certificate Management System 6.1, Руководство администратора

Страница: 241 / 840

Configuring Key Archival and Recovery Process
Chapter 6 Data Recovery Manager 241
❍
The key owner’s name
❍
The serial number of the key
❍
The public key that corresponds to the private key (in the form of base-64
encoded certificate)
❍
The instance ID of the enrollment authority that initiated the key archival
process
If you need more information about any of the fields in this form, click the
Help button.
4.
Click Show Key.
If the key has been archived successfully, you should see the information
pertaining to that key.
5.
Click Recover.
6.
In the form that appears, enter the following information:
❍
The PKCS #12 password; the Data Recovery Manager uses this password
to encrypt the PKCS #12 package (see “How Agent-Initiated Key Recovery
Works” on page 208).
❍
The base-64 encoded certificate that corresponds to the private key you
want to recover; use the enrollment authority’s end-entity or agent
interface to get this information. If you searched for the archived key by
providing the base-64 encoded certificate in (step 4), then you don’t have to
provide this information.
❍
The key recovery agents’ passwords.
7.
Click Recover.
If you entered the correct information, the Data Recovery Manager returns the
private key packaged as a PKCS #12 blob (it contains the recovered key pair
and the corresponding certificate) and prompts you to save it. Specify the path
and filename for saving the encrypted file. Be sure not to change the default file
extension (
.p12
).
Step E. Restore the Key in the Browser’s Database
To do this:
1.
Go to the security information window of your browser.
2.
Import the
*.p12
file (that you saved in the previous step) back into the
browser.