Netscape NETSCAPE CONSOLE 6.0 - MANAGING SERVERS, Руководство пользователя

Страница: 191 / 302

Activating SSL
Chapter 10 Using SSL and TLS with Netscape Servers 191
5.
Enter information as appropriate:
Enable SSL for this server. Select this option if you want to secure this server
with Secure Sockets Layer (SSL) encryption. All other SSL encryption options
listed here become available to you only when you enable SSL by checking this
box.
Use this cipher family. When you enable SSL encryption, the cipher families
available to you are listed here. Netscape Console currently supports two
cipher families: RSA and Fortezza. The internal security device supports only
RSA. If you’re using a Fortezza card, you’ll also see the Fortezza cipher family
listed in the Encryption tab. Select the cipher families you want to use.
Security Device. Choose internal (software) if the key is stored in the local key
database. All other choices on this list are available only if you are using an
external module.
Certificate. Choose a server certificate to use with this server.
Settings. Click this button to modify cipher (encryption algorithm) settings for
the certificate you selected above.
Disable Client Authentication. Select this option if you do not want this
server instance to perform client authentication.
Require Client Authentication. Select this option if you want this server
instance to require client authentication during the SSL handshake.
If you select this option, each Netscape Console administrator will be
prompted for a certificate when logging in. This ensures system security
because all administrators must present acceptable certificates before they can
perform management tasks. Even if an intruder obtains a user name and
password, he or she will need to present a valid certificate (one issued by a
trusted CA) to gain access to your enterprise.
For more information on setting trust options for CA certificates, see “To
Change the CA Trust Options,” which begins on page 194.
6.
Click Save.
7.
Exit Netscape Console and restart the server from the command line.
You can now start Netscape Console again and log in.