Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual page 269

Paste the certificate chain into the text box.
d.
Click Next to continue.
e.
If you closed the end-entity interface, you can get the CA certificate chain this
way:
Open a web browser window.
a.
Go to the end-entity URL for the Certificate Manager that issued the
b.
Online Certificate Status Manager's signing certificate.
Select the Retrieval tab, and then choose Import CA Certificate Chain.
c.
Select the "Display the CA certificate chain in PKCS#7 for importing into a
d.
server" option, and then click Submit.
Copy the certificate chain to the clipboard.
e.
Return to the Installation Wizard.
f.
Paste the certificate chain into the text box.
g.
Click Next to continue.
h.
Key-Pair Information for SSL Server Certificate. Select the token to store the
11.
SSL server certificate and key pair. If you have not previously initialized the
token's password, you must do so in this screen. Also specify the key type and
length.
Click Next to continue.
Subject Name for SSL Server Certificate. Type the values for the subject DN
12.
components; these values identify the Online Certificate Status Manager's SSL
server certificate. The CN must be the fully-qualified host name of the machine
on which you're installing the Online Certificate Status Manager.
Click Next to continue.
Certificate Extensions for SSL Server Certificate. Select the required
13.
extensions. The default settings should work for most deployments. If
necessary, you can add an additional extension by pasting its base-64 encoding
in the space provided on this screen.
Certificate Management System provides command-line tools for generating
extensions to include in CA and other certificate requests. For details about
these tools, check this directory:
Stage 2. Running the Installation Wizard
<server_root>/bin/cert/tools
Chapter 6 Installing Certificate Management System 269