Road Map To Configuring Subsystems; Step 1. Check Which Subsystems Are Installed In The Instance; Step 2. Check The Port Numbers; Step 3. Verify Key Pair And Certificates - Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual

Road Map to Configuring Subsystems

Road Map to Configuring Subsystems
This section outlines how to configure an instance of Certificate Management
System and indicates where to find the information required to accomplish the
task.

Step 1. Check Which Subsystems are Installed in the Instance

Log in to the CMS window for the CMS instance you installed, and check the
navigation tree to see which subsystems are installed in that instance; this way you
will know the subsystems you should configure. To log in to the CMS window, see
"Logging In to the CMS Window" on page 343.

Step 2. Check the Port Numbers

Check the port numbers assigned for administration, agent, and end-entity
operations. Make the appropriate modifications, if necessary. Keep in mind that all
subsystems installed in an instance use the same ports, but can be configured to
listen on different IP addresses. For instructions, see "Configuring Port Numbers"
on page 374.

Step 3. Verify Key Pair and Certificates

When you install a CMS instance, the server prompts you to create the certificates
required for the subsystems in that instance to function. You should check the
certificates used by each subsystem, and determine if you need to get additional
certificates, use hardware tokens, and so on.
• Each subsystem in an instance has a set of certificates that it uses for specific
purposes. Understand how and when the subsystem uses its certificates. For
details, see "Keys and Certificates for the Main Subsystems" on page 436.
• Determine if you want to generate any new certificates. For example, if you
have two subsystems installed in an instance, you may want them to use
separate SSL server certificates; by default, there's only one SSL server
certificate per instance. For details, see "Getting New Certificates for the
Subsystems" on page 485.
• Determine if you want to use hardware tokens for generating and storing these
certificates. If required, install new hardware tokens. For details, see "Tokens
for Storing CMS Keys and Certificates" on page 450.
• Determine if you want to renew any of the existing certificates. For example, if
you have issued certificates with very short validity periods, you might want
to renew them. For details, see "Renewing Certificates for the Subsystems" on
page 494.
366 Netscape Certificate Management System Installation and Setup Guide • October 2001