Step 8. Establish Trust Between Master Ca And Clone Cas - Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual

To configure a clone Certificate Manager:
Log in to or go to Netscape Console that shows the clone Certificate Manager
1.
instance.
In the navigation tree, locate the instance ID for the clone you created, and
2.
double-click the instance.
The CMS Installation Wizard starts.
Follow the on-screen instructions to finish configuring the clone CA. During
3.
configuration, be sure to follow these:
Clone key and certificate materials—On this screen, click Yes to reuse the
certificate and key material in the database files you copied from the
master Certificate Manager. In the Instance Name field enter the instance
ID of the master Certificate Manager. Select the token name where the keys
and certificate are stored and enter the token's password, if required.
Clone key and certificate materials—On this screen, you choose whether
to reuse the master Certificate Manager's SSL server certificate or create a
new one. If you created the clone Certificate Manager on the same host as
the master Certificate Manager, you can reuse the SSL server certificate. To
reuse the SSL server certificate, select Yes, enter the instance ID of the
master Certificate Manager, select a token, and enter the token password.
If you do not or cannot reuse the SSL server certificate, select No and
follow the screens that enable you to generate a new SSL server certificate.
CA's serial number range—On this screen, specify the lowest serial
number the CA should assign to certificates it creates in the "Starting serial
number" field. In the "Ending serial number" field, specify the highest
serial number available for this CA. For both the fields, you can enter the
number in decimal or hexadecimal (0xnn).
Repeat steps 1 through 3 for each clone Certificate Manager.
4.
Step 8. Establish Trust Between Master CA and
Clone CAs
For the master Certificate Manager to trust the clone Certificate Manager, you
associate the clone Certificate Manager as a trusted manager to the master Certificate
Manager. For details about trusted managers, see "Trusted Managers" on page 394.
Chapter 7 Installing and Uninstalling CMS Instances
Cloning a Certificate Manager
293