Table of Contents
Advertisement
Using External Encryption Modules
Perform the actions required.
6.
For example, in UNIX you would enter:
pk12util -i pk12_sunspot [-d certdir][-h "nCipher"][-P
https-jones.example.com-jones-]
-P must follow the -h and be the last argument.
Enter the exact token name including capital letters and spaces between quote
marks.
Enter the database password.
7.
Enter
8.
If you install a certificate for your server into an external PKCS#11 module (for
example, a hardware accelerator), the server will not be able to start using that
certificate until you edit the
described below.
The server always tries to start with the certificate named "Server-Cert." However,
certificates in external PKCS#11 modules include one of the module's token names
in their identifier. For example, a server certificate installed on an external
smartcard reader called "smartcard0" would be named "smartcard0:Server-Cert."
To start a server with a certificate installed in an external module, you'll need to
specify the certificate name for the connection group it runs on.
Selecting the Certificate Name for a Connection Group
To select the certificate name for the connection group, perform the following
steps:
Access either the Administration Server or the Server Manager and choose the
1.
Preferences tab.
For the Server Manager you must first select the server instance from the
drop-down list.
Select the Preferences tab, if not already selected.
2.
Click the Edit Listen Sockets link.
3.
The Listen Socket Table page appears.
Use the drop-down Action list to select Edit, if not already displayed, for the
4.
connection group you are enabling security for.
Use the drop-down list to turn Security on for that connection group, if it is off.
5.
116
Netscape Enterprise Server Administrator's Guide • November 2001
password.Starting the Server with an External Certificate
pkcs12
server.xml
, or specify the certificate name as
Advertisement
Table of Contents
