Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual page 231

Network Configuration. Type the port numbers for the ports to be used by the
3.
CMS instance. If you want to enable the non-SSL end-entity port, be sure to
check the "Enable" checkbox.
Click Next to continue.
CA's serial number range. Specify range for the serial numbers. In the
4.
"Starting serial number" field, type the lowest serial number the CA should
assign to a certificate. If you only use one CA server, you can leave the "Ending
serial number" field blank to indicate no upper limit. If you plan to clone the
CA to distribute load, you must specify an upper limit. (For cloned CAs, you
must make sure that the range of serial numbers does not overlap with any
other CA server.)
Click Next to continue.
CA Signing Certificate. Select the "Create subordinate CA certificate request"
5.
option.
Click Next to continue.
Key-Pair Information for Certificate Manager CA signing certificate. Select
6.
the token to store the CA signing certificate and key pair. If you have not
previously initialized the token's password, you must do so in this screen. Also
specify the key type and length.
Click Next to continue.
Message Digest Algorithm. Select the algorithm to use for computing the
7.
certificate signature. The choices are: MD2, MD5, or SHA-1.
Click Next to continue.
Subject Name for Certificate Manager CA Signing Certificate. Type values
8.
for the subject DN components; these values identify the subordinate CA
signing certificate.
Click Next to continue.
Validity Period for Certificate Manager CA Signing Certificate. Select the
9.
validity period for the subordinate CA signing certificate. The default validity
is two years. The validity period determines how soon you will have to renew
the certificate, which can be a complex procedure.
Click Next to continue.
Stage 2. Running the Installation Wizard
Chapter 6 Installing Certificate Management System 231