Transport Certificate Request; Storage Key And Recovery Agent Configuration; Storage Key Creation; Data Recovery Scheme-1 - Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual

Data Recovery Manager Configuration
• Key usage (No)_____________
If you decide to include the key usage extension, the
usage bit is set by default.
• Additional Extension (No)___________________________
To add extensions not included by default by Certificate Management System,
you will need to paste the base64 encoding of a sequence of extensions into the
wizard.

Transport Certificate Request

If you are obtaining your transport certificate from a remote CA, you need to know
where to submit your certificate request.
If you are submitting your transport certificate request to a third-party CA, follow
the instructions provided by that CA.
If you are submitting your certificate request to a Certificate Manager, you need to
know its URL:
• End-entity URL for issuing Certificate Manager___________________________
Enter the URL for the end-entity gateway of the Certificate Manager that will
issue the transport certificate. For example,

Storage Key and Recovery Agent Configuration

Storage Key Creation

Specify the length of the key that the Data Recovery Manager uses to encrypt
end-entity encryption keys for storage.
• Storage key length___________________
The options available are 512, 1024, 2048, or 4096.
Data Recovery Scheme—1
The number of agents you enter here is determined by your organization's policies
with respect to data recovery. If you enter a larger number than the default of 2 for
the number of recovery agents required to recover a key, you're reducing the
chances of inappropriate recovery but increasing the complexity of the recovery
process.
206 Netscape Certificate Management System Installation and Setup Guide • October 2001
keyEncipherment
http://<hostname>:17006
key
.