Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual page 228

Stage 2. Running the Installation Wizard
Key-Pair Information for Certificate Manager CA Signing Certificate. Select
6.
the token to store the root CA signing certificate and key pair. If you have not
previously initialized the token's password, you must do so in this screen. Also
specify the key type and length.
Click Next to continue.
Message Digest Algorithm. Select the algorithm to use for computing the
7.
certificate signature. The choices are: MD2, MD5, or SHA-1.
Click Next to continue.
Subject Name for Certificate Manager CA Signing Certificate. Type values
8.
for the subject DN components; these values identify the root CA signing
certificate.
Click Next to continue.
Validity Period for Certificate Manager CA Signing Certificate. Select the
9.
validity period for the CA signing certificate. The default validity is two years.
The validity period determines how soon you will have to renew the
certificate, which can be a complex procedure.
Click Next to continue.
Certificate Extensions for Certificate Manager CA Signing Certificate. Select
10.
the required extensions. The default settings should work for most
deployments. If necessary, you can add an additional extension by pasting its
base-64 encoding in the space provided on this screen.
Certificate Management System provides command-line tools for generating
extensions to include in CA and other certificate requests. For details about
these tools, check this directory:
Note that the certificate extension text field accepts a single extension blob. If
you want to add multiple extensions, you should use the
which is also provided in the
ExtJoiner
Command-Line Tools Guide.
Click Next to continue.
Certificate Manager CA Signing Certificate Creation. Click Next to generate
11.
and install the certificate.
228 Netscape Certificate Management System Installation and Setup Guide • October 2001
tools
program, see Chapter 5, "Extension Joiner Tool" of CMS
<server_root>/bin/cert/tools
directory. For details on using the
program,
ExtJoiner