Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual page 248

Stage 2. Running the Installation Wizard
c.
d.
e.
f.
Click Next to continue.
Key-Pair Information for SSL Server Certificate. Select the token to store the
15.
SSL server certificate and key pair. If you have not previously initialized the
token's password, you must do so in this screen. Also specify the key type and
length.
Click Next to continue.
Message Digest Algorithm. Select the algorithm to use for computing the
16.
certificate signature. The choices are: SHA-1, MD2, or MD5.
Click Next to continue.
Subject Name for SSL Server Certificate. Type the values for the subject DN
17.
components; these values identify the Registration Manager's SSL server
certificate. The CN must be the fully-qualified host name of the machine on
which you're installing the Registration Manager.
Click Next to continue.
Certificate Extensions for SSL Server Certificate. Select the required
18.
extensions. The default settings should work for most deployments. If
necessary, you can add an additional extension by pasting its base-64 encoding
in the space provided on this screen. (For details, see Step 8 of this section.)
Click Next to continue.
SSL Server Certificate Request Creation. This is an informational screen that
19.
tells you that the wizard has all the information required to generate the key
pair and certificate request. In the previous screen, if you chose to include the
Subject Key Identifier extension in the certificate, you'll be given the choice to
select the format for the certificate request. Otherwise, the request format will
be PKCS #10.
248 Netscape Certificate Management System Installation and Setup Guide • October 2001
In the resulting form, select the "Display the CA certificate chain in
PKCS#7 for importing into a server" option, and then click Submit.
In the resulting page, locate the CA certificate chain in its base-64 encoded
format, and copy the certificate chain to the clipboard.
Return to the Installation Wizard.
Paste the certificate chain into the text box.
If you want the wizard to generate the certificate request in PKCS #10
format, select the "Generate PKCS10 request" option.