Table of Contents
Advertisement
Obtaining and Installing a Server Certificate
Obtaining and Installing a Server Certificate
When requesting and installing certificates, you use two wizards. You use the
Certificate Request Wizard to request a new server certificate or to renew a
certificate that you're already using. You use the Certificate Installation Wizard to
install a certificate that you've received from a Certificate Authority (CA). The first
time you use the Certificate Request Wizard, it will also create and install a key and
certificate database for you.
This section takes you through the steps of requesting and installing a certificate.
SSL Certificates
Netscape Console can install three types of certificates: server certificates, server
certificate chains, or trusted CA certificates.
A server certificate is a single certificate associated only with your server. It
identifies your server to clients. You must request this type of certificate from a CA.
To obtain and install a Server Certificate, generate a request and send it to the CA.
Then install the certificate.
For information on installing a server certificate, see "Generating a Server
Certificate Request" on page 184 and "Installing the Certificate" on page 187.
A server certificate chain is a collection of certificates automatically generated for you
by your company's internal certificate server or a known CA. The certificates in a
chain trace back to the original CA, providing proof of identity. This proof is
required each time you obtain or install a new server certificate.
A trusted CA certificate is a single certificate automatically generated for you by
your company's internal certificate server or a known CA. A trusted CA certificate
is used to authenticate clients.
To obtain a trusted CA certificate, first go to the internal certificate server or CA's
web site. Copy the necessary certificate information and save it to a file. Then use
the Certificate Installation Wizard to install the certificate. For more information,
see "Installing the Certificate" on page 187.
You can install any number of SSL certificates on a server. When setting up SSL for
an instance of Directory Server, you need to install at least a server certificate and a
trusted CA certificate.
Chapter 10
Using SSL and TLS with Netscape Servers
183
Advertisement
Table of Contents
