Table of Contents
Advertisement
Requesting and Installing Other Server Certificates
Some commercial CAs offer certificates with greater detail and veracity to
organizations or individuals who provide more thorough identification. For
example, you might be able to purchase a certificate stating that the CA has not
only verified that you are the rightful administrator of the
computer, but that you are a company that has been in business for three years,
and have no outstanding customer litigation.
Requesting Other Server Certificates
To request a certificate, perform the following steps:
Access either the Enterprise Server Administration Server or the Server
1.
Manager and choose the Security tab.
For the Server Manager you must first select the server instance from the
drop-down list.
Click the Request a Certificate link.
2.
Select if this is a new certificate or a certificate renewal.
3.
Many certificates expire after a set period of time, such as six months or a year.
Some CAs will automatically send you a renewal.
Perform the following steps to specify how you want to submit the request for
4.
the certificate:
Select the cryptographic module for the key-pair file you want to use when
5.
requesting the certificate from the drop-down list.
Select the cryptographic key size to be used with the certificate from the
6.
drop-down list. Choose a key size of 1024 or 2048 bits.
This key is used in RSA operations. Larger keys can provide improved
security, but the computation time associated with this key is proportional to
the square of the modulus. For example, a key size of 2048 bits takes four times
longer to process than a 1024-bit key size.
94
Netscape Enterprise Server Administrator's Guide • August 2002
If the CA expects to receive the request in an email message, check CA
Email and enter the email address of the CA. For a list of CAs, click List of
available certificate authorities.
If you are requesting the certificate from an internal CA that is using
Netscape Certificate Server, click CA URL and enter the URL for the
Certificate Server. This URL should point to the certificate server's
program that handles certificate requests. A sample URL might be:
https://CA.example.com:444/cms
www.example.com
.
Advertisement
Table of Contents
