Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 121 / 532

Chapter 5, Working with Server Security 121
Requesting a Certificate
4.
Perform the following steps to specify how you want to submit the request
for the certificate:
1.
If the CA expects to receive the request in an email message, check
CA Email and enter the email address of the CA. For a list of CAs, click
List of available certificate authorities.
2.
If you are requesting the certificate from an internal CA that is using
Netscape Certificate Server, click
CA URL and enter the URL for the
Certificate Server. This URL should point to the certificate server’s
program that handles certificate requests. A sample URL might be:
https://CA.mozilla.com:444/cms
.
5.
From the drop-down list, select the cryptographic module for the key-pair
file you want to use when requesting the certificate.
For information about installing additional cryptographic modules, see
“Adding a PKCS #11Module,” on page 129, or see “The Install a New
PKCS#11 Module Page,” in the online help.
6.
Type the password for your key-pair file. This is the same password you
specified when you created the trust database in “Creating a Certificate
Trust Database.” The server uses the password to get your private key and
encrypt a message to the CA. The server then sends both your
public key
and the encrypted message to the CA. The CA uses the public key to
decrypt your message.
7.
Type your identification information. The format of this information varies
by CA. For a general description of these fields, see “Required CA
Information.” Note that most of this information usually isn’t required for a
certificate renewal.
8.
Double-check your work to ensure accuracy. The more accurate the
information, the faster your certificate is likely to be approved.
9.
Click OK once you’ve checked that the information is correct. If your
request is going to a certificate server, you’ll be prompted to verify the form
information before the request is submitted. You should re-read the
information and then click OK to submit the request to the certificate server.
For more information, see “The Request a Server Certificate Page,” in the online
help.