Netscape Certificate Management System 6.1, Руководство администратора

Страница: 296 / 840

Managing the Certificate Database
296 Netscape Certificate Management System Administrator’s Guide • February 2003
3.
Click Manage Certificate.
The Certificate Database Management window appears.
The window lists the certificates.
For each certificate, you see the following information:
Certificate Name. Specifies the nickname of the certificate.
Expiry Date. Specifies the date (and time) on which the certificate expires.
Trust Status.
Specifies whether the CA is trusted or untrusted. To change the
trust setting, see “Changing the Trust Settings of a CA Certificate” on page 296.
list is a table, with each certificate occupying a row.
4.
To delete a certificate:
a.
select the CA certificate you want to delete, and click Delete.
b.
When prompted, confirm the delete action.
c.
Click Close.
5.
To save your changes, click Save.
Changing the Trust Settings of a CA Certificate
CMS relies on the CA certificates in its certificate database for validating certificates
it receives during an SSL-enabled communication.
You may need to change the status of a currently trusted CA to untrusted (or vice
versa) temporarily or permanently. By making the CA certificate untrusted, you
can prevent entities whose certificates have been signed by that CA from
successfully authenticating to CMS. You can then return the trust option to trusted
when the CA notifies you that the problem has been resolved.
If you want to untrust a CA permanently, you should consider removing its
certificate from the trust database altogether. For instructions, see “Viewing and
Deleting Certificate Database Content” on page 295.
To change the trust setting of a CA certificate:
1.
Log in to the CMS window (see “Logging Into the CMS Console” on page 247).
2.
Select the Configuration tab, and then in the right pane, select the Encryption
tab.