Netscape NETSCAPE CONSOLE 6.0 - MANAGING SERVERS, Руководство пользователя

Страница: 194 / 302

Managing Server Certificates
194 Managing Servers with Netscape Console • December 2001
12.
Click Done to close the Certificate Request Wizard.
You can now send your certificate renewal request to your CA. For more
information, see “To Send a Server Certificate Request as email” on page 186.
Changing the CA Trust Options
At times, you may need to reject a generally trusted CA. For example, if you are
notified that a CA is experiencing technical difficulties that prevent certificate
authentication, you can temporarily reject the CA’s certificate. When you are
informed that the problem has been resolved, you can begin trusting the certificate
again.
To Change the CA Trust Options
1.
In the Netscape Console navigation tree, select the server instance on which
you want to change a CA trust option.
2.
Click Open to open the management window for the server instance.
3.
On the Tasks tab, click the Manage Certificates task button.
You can also open the Console menu, and then choose Security > Manage
Certificates.
4.
Click the CA Certs tab and then, from the list of available CA certificates, select
the CA certificate for which you want to change the trust options.
5.
Click the Edit Trust button.
6.
Set the following CA trust options:
Accepting connections from clients (Client Authentication). Uncheck this box
if you want to reject client certificates issued by this CA.
Making connections to other servers (Server Authentication). Uncheck this
box if you want to reject server certificates issued by this CA.
7.
Click OK.
Changing Security Device Passwords
You should periodically change the passwords for your security devices.