Table of Contents
Advertisement
Using External Encryption Modules
The server always tries to start with the certificate named "Server-Cert." However,
certificates in external PKCS#11 modules include one of the module's token names
in their identifier. For example, a server certificate installed on an external
smartcard reader called "smartcard0" would be named "smartcard0:Server-Cert."
To start a server with a certificate installed in an external module, you'll need to
specify the certificate name for the connection group it runs on.
Selecting the Certificate Name for a Connection Group
To select the certificate name for the connection group, perform the following
steps:
Access either the Administration Server or the Server Manager and choose the
1.
Preferences tab.
For the Server Manager you must first select the server instance from the
drop-down list.
Select the Preferences tab, if not already selected.
2.
Click the Edit Listen Sockets link.
3.
The Listen Socket Table page appears.
Use the drop-down Action list to select Edit, if not already displayed, for the
4.
connection group you are enabling security for.
Use the drop-down list to turn Security on for that connection group, if it is off.
5.
Click OK.
6.
The Attributes link now appears.
Click the Attributes link.
7.
The Security Settings of Listen Socket page appears.
Use the drop-down CertificateName list to select the external server certificate.
8.
Click OK
9.
For the Server Manager, click Apply, and then Restart for changes to take
10.
effect.
You can also tell the server to start with that server certificate instead by manually
editing the
SSLPARAMS subelement to:
$TOKENNAME
118
Netscape Enterprise Server Administrator's Guide • August 2002
file. Change the
server.xml
:Server-Cert
servercertnickname
attribute of the
Advertisement
Table of Contents
