Obtaining And Installing Server Certificates; Step 1: Generate A Certificate Request - Netscape DIRECTORY SERVER 6.2 - ADMINISTRATOR Administrator's Manual

Optionally, ensure that each user of the Directory Server obtains and installs
4.
a personal certificate for all clients that will authenticate with SSL.
For information, see "Configuring LDAP Clients to Use SSL" on page 409.
For a complete description of SSL, internet security, and certificates, check the
appendixes included in Managing Servers with Netscape Console.

Obtaining and Installing Server Certificates

This section describes the process of creating a certificate database, obtaining and
installing a certificate for use with your Directory Server, and configuring
Directory Server to trust the certification authority's (CA) certificate.
This process is a necessary first step before you can turn on SSL in your directory. If
you have already completed these tasks, see "Activating SSL" on page 403.
Obtaining and installing certificates consists of the following steps:
•

Step 1: Generate a Certificate Request

• Step 2: Send the Certificate Request to the Certificate Authority
• Step 3: Install the Certificate
• Step 4: Trust the Certificate Authority
• Step 5: Confirm That Your New Certificates Are Installed
You will use the Certificate Request Wizard to generate a certificate request (Step 1)
and send it to a Certificate Authority (Step 2). You then use the Certificate Install
Wizard to install the certificate (Step 3), and to trust the Certificate Authority's
certificate (Step 4).
These wizards automate the process of creating a certificate database, and of
installing the key-pair.
Step 1: Generate a Certificate Request
To generate a certificate request and send it to a CA:
In the Directory Server Console, select the Tasks tab and click Manage
1.
Certificates.
The Manage Certificates window is displayed.
Obtaining and Installing Server Certificates
Chapter 11 Managing SSL 399