Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 119 / 532

Chapter 5, Working with Server Security 119
Creating a Certificate Trust Database
Creating a Certificate Trust Database
A certificate database is a key-pair and certificate database installed on the local
host. When you use an internal token, the certificate database is the database
into which you install the key and certificate. In Enterprise Server 4.0, each
server instance (including the Enterprise Administration Server) has its own
certificate/key pair which is referred to as a
trust database .
A key-pair file contains both the public and private keys used for SSL
encryption. You use the key-pair file when you request and install a certificate.
The key-pair file is stored encrypted in the following directory:
server_root /alias
/
<alias>-key.db
.
When you create the key, you specify a password that you later use when you
request the certificate and when you start a server that is using encrypted
communications.
To create the certificate trust database, perform the following steps:
1.
Access the Enterprise Administration Server and choose the Security tab.
2.
Select the desired cryptographic module (the PKCS#11 cryptographic
module is the default).
For information about installing additional cryptographic modules, see
“Adding a PKCS #11Module,” on page 129, or see “The Install a New
PKCS#11 Module Page,” in the online help.
3.
Type the password in Database Password.
4.
Re-type the password in Password (again).
5.
Click OK.
If no database exists, Enterprise Server creates the proper key and certificate
database files and stores them in the
alias/
directory (otherwise, Enterprise
Server displays an error message).
For more information, see “The Create a Trust Database Page,” in the online
help.