Netscape Certificate Management System 6.2, Руководство администратора

Страница: 305 / 874

Managing the Certificate Database
Chapter 7 Administrative Basics 305
2.
Click Next to submit your request to the CA.
The Certificate Manager returns a request ID for your request. Note the request
ID as you can use it later to get the certificate from the Certificate Manager to
which you submitted the request.
The request you submitted gets queued for agent approval—an agent needs to
process and approve the certificate request, which the CA signs then and
delivers back to the email address specified in the request. You can contact the
CA agent to find out when the certificate will be delivered to you. If you have
agent privileges to the Certificate Manager, you can log in to its agent interface
and approve the request yourself.
3.
Once the certificate has been issued, you can use the request ID to import the
certificate into the wizard. Alternatively, you can also install the certificate
following the instructions in “Using the Wizard to Install a Certificate or
Certificate Chain” on page 307.
Sending the CSR Manually to an Internal CA
The following instructions assume that your internally deployed CA is a Certificate
Manager and that you are using the default HTML forms provided for end-entity
enrollment. If you have customized these forms, you should follow the appropriate
instructions.
To send the certificate signing request (CSR) manually to an internal CA:
1.
Copy the CSR, including the marker lines
-----BEGIN NEW CERTIFICATE
REQUEST-----
and
-----END NEW CERTIFICATE REQUEST-----
, to a text file.
2.
Open a web browser window.
3.
Enter the URL to the CA’s home page.
By default, the CA’s home page is the end entity services interface. Depending
on the port at which the CA is listening to end-entity requests (see “Changing a
Port Number” on page 286) the URL to the end entity services is one of the
following:
http://<hostname>:<end_entity_port>
or
https://<hostname>:<end_entity_port>
, where
<hostname>
is in the form
<machine_name>.<your_domain>.<domain>
The end entity services interface appears.
4.
Click the Enrollment tab.
5.
In the menu list, click the appropriate link the type of certificate you are
getting.