Netscape Certificate Management System 6.1, Руководство администратора

Страница: 318 / 840

Tokens for Storing CMS Keys and Certificates
318 Netscape Certificate Management System Administrator’s Guide • February 2003
b.
From the Console menu, choose Manage PKCS#11.
The PKCS #11 Management window appears.
c.
Click Add.
The Add PKCS #11 Module window appears.
d.
Enter information as appropriate. If you choose JAR as your file type, you
are required to provide the path to the JAR file that contains the DLLs. If
you choose DLL as your file type, in addition to the path to the DLL you
are also required to provide a name for the module you’re attempting to
install (so as to help you identify it easily later). The sample in the figure
shows how you would install an nCipher
TM
token.
Pick DLL to add a UNIX shared/dynamic library, which on a Solaris
machine is identified with the
.so
extension.
e.
Click OK.
• To install the PKCS #11 module using the
modutil
tool:
a.
Locate the CMS instance for which you want to install the PKCS #11
module.
b.
Open a terminal window.
c.
Go to the
alias
directory:
<server_root>/alias
d.
At the prompt, enter this command:
<server_root>/shared/bin/modutil -dbdir . -nocertdb -create
This creates the required security module database file (
secmod.db
) in the
Administration Server’s configuration directory.
e.
At the prompt, enter this command:
<server_root>/shared/bin/modutil -dbdir . -nocertdb
-add <module_name> -libfile <library_file>
<library_file>
specifies the path to the DLL or other library file
containing the implementation of the PKCS #11 interface module.
<module_name>
specifies the name of the PKCS #11 module (which you
specified in Step 1 when you installed the drivers).