Table of Contents
Advertisement
Requesting and Installing Other Server Certificates
Some commercial CAs offer certificates with greater detail and veracity to
organizations or individuals who provide more thorough identification. For
example, you might be able to purchase a certificate stating that the CA has not
only verified that you are the rightful administrator of the
computer, but that you are a company that has been in business for three years,
and have no outstanding customer litigation.
Requesting Other Server Certificates
To request a certificate, perform the following steps:
Access either the Administration Server or the Server Manager and choose the
1.
Security tab.
For the Server Manager you must first select the server instance from the
drop-down list.
Click the Request a Certificate link.
2.
Select if this is a new certificate or a certificate renewal.
3.
Many certificates expire after a set period of time, such as six months or a year.
Some CAs will automatically send you a renewal.
Perform the following steps to specify how you want to submit the request for
4.
the certificate:
Select the cryptographic module for the key-pair file you want to use when
5.
requesting the certificate from the drop-down list.
Enter the password for your key-pair file.
6.
This is the password you specified when you created the trust database, unless
you selected a cryptographic module other than the internal module. The
server uses the password to get your private key and encrypt a message to the
CA. The server then sends both your public key and the encrypted message to
the CA. The CA uses the public key to decrypt your message.
96
Netscape Enterprise Server Administrator's Guide • November 2001
If the CA expects to receive the request in an email message, check CA
Email and enter the email address of the CA. For a list of CAs, click List of
available certificate authorities.
If you are requesting the certificate from an internal CA that is using
Netscape Certificate Server, click CA URL and enter the URL for the
Certificate Server. This URL should point to the certificate server's
program that handles certificate requests. A sample URL might be:
https://CA.example.com:444/cms
www.example.com
.
Advertisement
Table of Contents
