Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Инструкция по установке и настройке

Страница: 269 / 866

Stage 2. Running the Installation Wizard
Chapter 6 Installing Certificate Management System 269
d.
Paste the certificate chain into the text box.
e.
Click Next to continue.
If you closed the end-entity interface, you can get the CA certificate chain this
way:
a.
Open a web browser window.
b.
Go to the end-entity URL for the Certificate Manager that issued the
Online Certificate Status Manager’s signing certificate.
c.
Select the Retrieval tab, and then choose Import CA Certificate Chain.
d.
Select the “Display the CA certificate chain in PKCS#7 for importing into a
server” option, and then click Submit.
e.
Copy the certificate chain to the clipboard.
f.
Return to the Installation Wizard.
g.
Paste the certificate chain into the text box.
h.
Click Next to continue.
11.
Key-Pair Information for SSL Server Certificate. Select the token to store the
SSL server certificate and key pair. If you have not previously initialized the
token’s password, you must do so in this screen. Also specify the key type and
length.
Click Next to continue.
12.
Subject Name for SSL Server Certificate. Type the values for the subject DN
components; these values identify the Online Certificate Status Manager’s SSL
server certificate. The CN must be the fully-qualified host name of the machine
on which you’re installing the Online Certificate Status Manager.
Click Next to continue.
13.
Certificate Extensions for SSL Server Certificate.
Select the required
extensions. The default settings should work for most deployments. If
necessary, you can add an additional extension by pasting its base-64 encoding
in the space provided on this screen.
Certificate Management System provides command-line tools for generating
extensions to include in CA and other certificate requests. For details about
these tools, check this directory:
<server_root>/bin/cert/tools