Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual page 229

SSL Server Certificate. Select the "Sign SSL certificate with my CA signing
12.
certificate" option. This option enables the wizard to generate an SSL Server
Certificate signed with the local CA signing certificate, the root Certificate
Manager's CA signing certificate you just created.
Click Next to continue.
Key-Pair Information for SSL Server Certificate. Select the token to store the
13.
SSL server certificate and key pair. If you have not previously initialized the
token's password, you must do so in this screen. Also specify the key type and
length.
Click Next to continue.
Message Digest Algorithm. Select the algorithm to use for computing the
14.
certificate signature. The choices are: SHA-1, MD2, or MD5.
Click Next to continue.
Subject Name for SSL Server Certificate. Type the values for the subject DN
15.
components; these values identify the root CA's SSL server certificate. The CN
must be the fully-qualified host name of the machine on which you're
installing the Certificate Manager.
Click Next to continue.
Validity Period for SSL Server Certificate. Select the validity period for the
16.
SSL server certificate. The validity period determines how soon you will have
to renew the certificate.
Click Next to continue.
Certificate Extensions for SSL Server Certificate. Select the required
17.
extensions. The default settings should work for most deployments. If
necessary, you can add an additional extension by pasting its base-64 encoding
in the space provided on this screen (see Step 10).
Click Next to continue.
SSL Server Certificate Creation. This information screen tells you that the
18.
configuration wizard has all the required information to generate a key pair
and its corresponding certificate.
Click Next to generate the certificate.
Stage 2. Running the Installation Wizard
Chapter 6 Installing Certificate Management System 229