Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 120 / 532

Requesting a Certificate
120 Netscape Enterprise Server Administrator’s Guide
Requesting a Certificate
After you generate a trust database, you must create a PKCS #10 certificate
request and submit it to a Certificate Authority to obtain your server SSL
certificate. To enable SSL for a particular server instance, you must obtain a
server SSL certificate for the server, then configure the server to require client
authentication and optionally to check users’ client certificates against certificate
information that a CA has published to the LDAP directory.
If your company has its own internal CA for issuing certificates, you should
request your certificate from them. If you plan to purchase your certificate from
a commercial CA, choose a CA and ask for the specific format of the
information they require. (For more information on what some CAs require, see
“Required CA Information.”)
Note
Not everyone who requests a certificate from a commercial CA is given one.
Many CAs require you to prove your identity before issuing you a certificate.
Also, it can take anywhere from a day to two months or more to approve a
certificate. You are responsible for promptly providing all the necessary
information to the CA.
To request a certificate, make sure you know what information your CA
requires, and then perform the following steps:
1.
Access the Enterprise Administration Server and choose the Security tab.
2.
Click the Request Certificate link.
3.
In the form that Enterprise Server displays, specify if this is a new certificate
or a renewal. Many certificates expire after a set period of time, such as six
months or a year. Some CAs will automatically send you a renewal.