Netscape Certificate Management System 6.2, Руководство администратора

Страница: 425 / 874

Generating Files Required By Third-Party Object Signing Tools
Chapter 9 Authentication 425
1.
Log in to the CMS window (see “Logging Into the CMS Console” on page 245).
2.
Select the Configuration tab.
3.
In the navigation tree, click Authentication, and in the right pane, click the
Authentication Plug-in Registration tab.
The tab lists modules that are already registered.
4.
To delete a registered module, select that module and click Delete.
5.
To register a plug-in, click Register.
The Register Authentication Plug-in Implementation window appears.
6.
Specify which module you want to register:
Plugin name. Type a name for the module.
Class name.
Type the full name of the class for this module—that is, the path to
the implementing Java class. If this class is part of a package, be sure to include
the package name. For example, if you are registering a class named
customAuth
and if this class is in a package named
com.customplugins
, type
com.customplugins.customAuth
.
7.
Click OK.
Generating Files Required By Third-Party Object
Signing Tools
Note: This feature is supported in the legacy enrollments only. When issuing an
object-signing certificate to Microsoft IE, CMS can generate a certificate (
.CER
) and
a private key (
.PVK
) files for use by Microsoft
signcode
tool or any third-party sign
tools that rely on these files. For the server to generate these files, you must edit the
default form provided for requesting an object-signing certificate for browsers.
To generate the private-key file:
1.
Go to this directory:
<server_root>/cert-<instance_id>/web-apps/ee
2.
Locate the file named
ManObjSignEnroll.html
.
3.
Open it in an editor.
4.
Search for this line:
Enroll.GenKeyFlags = 1 ’ key exportable