Netscape ENTREPRISE SERVER 6.1 - 04-2002 ADMINISTRATOR Administrator's Manual page 118

Using External Encryption Modules
Enter
8.
Importing with pk12util
To import a certificate and key into an internal or external PKCS#11 module,
perform the following steps:
Go to the
1.
Add
2.
Locate
3.
Set the environment. For example:
4.
Enter the command:
5.
The options will be listed.
Perform the actions required.
6.
For example, in UNIX you would enter:
pk12util -i import_file [-d cert_dir] [-h "token_name"] [-P db_prefix]
-P
Enter the exact token name including capital letters and spaces between quote
marks.
Enter the database password.
7.
Enter
8.
Starting the Server with an External Certificate
If you install a certificate for your server into an external PKCS#11 module (for
example, a hardware accelerator), the server will not be able to start using that
certificate until you edit the
described below.
118 Netscape Enterprise Server Administrator's Guide • April 2002 (Draft)
password.
pkcs12
server_root/alias directory
server_root/bin/https/admin/bin
in
pk12util server_root/bin/https/admin/bin
On UNIX:
setenv
LD_LIBRARY_PATH/server_root/bin/https/lib:${LD_LIBRARY_PATH}
On HP-UX:
SHLIB_PATH
On Windows NT/Windows 2000, add it to the
LD_LIBRARY_PATH server_root/bin/https/bin
You can find the PATH for your machine listed under:
server_root
/https-admin/start
pk12util
must follow the and be the last argument.
-h
password.
pkcs12
containing the databases.
to your PATH.
.
.
, or specify the certificate name as
server.xml
.
PATH