Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 124 / 532

Installing and Managing Certificates
124 Netscape Enterprise Server Administrator’s Guide
When you receive a certificate from the CA, it will be encrypted with your
public key so that only you can decrypt it. The server will use the key-pair file
password you specify to decrypt the certificate when you install it. You can
either save the email somewhere accessible to the server, or copy the text of
the email and be ready to paste the text into the Install Certificate form, as
described here.
A certificate chain is a hierarchical series of certificates signed by successive
certificate authorities. A CA certificate identifies a certificate authority (CA) and
is used to sign certificates issued by that authority. A CA certificate can in turn
be signed by the CA certificate of a parent CA and so on up to a root CA.
Note
CAs’ certificates for use in a certificate chain are installed using the same
process as installing your own certificate. If your CA doesn’t automatically send
you their certificate, you should request it. However, many CAs include their
certificate in the same email that contains your certificate. In this case, your
server installs both certificates at the same time when you install your
certificate. For more information on certificate chaining, see “Appendix D
Introduction to Public-Key Cryptography,” in
Managing Servers with Netscape
Console.
To install a certificate and associate it with an alias, perform the following steps:
1.
Access the Enterprise Administration Server and choose the Security tab.
2.
Click the Install Certificate link.
3.
Check the type of certificate you are installing:
• This Server is for a single certificate associated only with your server.
• Server Certificate Chain is for a CA’s certificate to include in a
certificate chain.
• Trusted Certificate Authority (CA) is for a certificate of a CA that you
want to accept as a trusted CA for client authentication.
4.
If the certificate is for a chain, name the certificate. Enterprise Server
displays this name in the Manage Certificates list. The name should be
descriptive and can include spaces. For example, “United States Postal
Service CA” is the name of the CA, and “VeriSign Class 2 Primary CA”
describes both the CA and the type of certificate. If the certificate is for “this
server,” the Enterprise Administration Server uses the name Server-Cert.