Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual page 232

Stage 2. Running the Installation Wizard
Certificate Extensions for Certificate Manager CA Signing Certificate. Select
10.
the required extensions. The default settings should work for most
deployments. If necessary, you can add an additional extension by pasting its
base-64 encoding in the space provided on this screen.
Certificate Management System provides command-line tools for generating
extensions to include in CA and other certificate requests. For details about
these tools, check this directory:
Note that the certificate extension text field accepts a single extension blob. If
you want to add multiple extensions, you should use the
which is also provided in the
ExtJoiner
Command-Line Tools Guide.
Click Next to continue.
Certificate Manager CA Signing Certificate Creation. This is an informational
11.
screen that tells you that the wizard has all the information required to
generate the key pair and certificate request. In the previous screen, if you
chose to include the Subject Key Identifier extension in the certificate, you'll be
given the choice to select the format for the certificate request. Otherwise, the
request format will be PKCS #10.
Click Next to generate the request. The wizard creates a certificate request that
you must submit to another CA.
Submission of Request. Select whether you want to submit the request
12.
manually or send the request to a remote Certificate Manager automatically.
To automatically submit the request to a remote Certificate Manager (or for
automatic enrollment), follow these steps:
a.
b.
232 Netscape Certificate Management System Installation and Setup Guide • October 2001
program, see Chapter 5, "Extension Joiner Tool" of CMS
If you want the wizard to generate the certificate request in PKCS #10
format, select the "Generate PKCS10 request" option.
If you want the wizard to generate the certificate request in CMC format,
select the "Generate CMC full enrollment request" option.
Select the "Send the request to a remote CMS now" option.
Enter the host name and end-entity port number of the remote Certificate
Manager, and select whether this end-entity port is SSL enabled.
<server_root>/bin/cert/tools
directory. For details about using the
tools
program,
ExtJoiner