Registration Manager's Key Pairs And Certificates; Signing Key Pair And Certificate; Ssl Server Key Pair And Certificate - Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual

Registration Manager's Key Pairs and
Certificates
The Registration Manager uses the following certificates:
•

Signing Key Pair and Certificate

•

SSL Server Key Pair and Certificate

• Remote Administration Server Certificate
Signing Key Pair and Certificate
Every Registration Manager you have installed has a certificate, identified as the
Registration Manager signing certificate, whose public key corresponds to the private
key the Registration Manager uses to sign certificate requests before sending them
to the Certificate Manager for signing. The Registration Manager's signature
provides persistent proof to the Certificate Manager that the Registration Manager
has processed the request. The first time you generated this certificate is when you
installed the Registration Manager. The default nickname for the certificate is
raSigningCert cert-<instance_id>
instance in which the Registration Manager is installed.
The Registration Manager's signing certificate was issued by the CA to which you
submitted the certificate signing request. You might have submitted the request to
an internally deployed CA or a public CA. To find out the issuer name, follow the
instructions in "Viewing the Certificate Database Content" on page 502.
If you configure the Registration Manager to function as a trusted manager to
another subsystem, the Registration Manager uses its signing certificate for SSL
client authentication to the subsystem; this is the default configuration. For details,
see "Trusted Manager's Certificate for SSL Client Authentication" on page 397.
SSL Server Key Pair and Certificate
Every Registration Manager you have installed has at least one SSL server certificate.
The first time you generated this certificate is when you installed the Registration
Manager. The default nickname for the certificate is
Server-Cert cert-<instance_id>
instance in which the Registration Manager is installed.
The Registration Manager's SSL server certificate was issued by the CA to which
you submitted the certificate signing request. You might have submitted the
request to an internally deployed CA or a public CA. To find out the issuer name,
follow the instructions in "Viewing the Certificate Database Content" on page 502.
Keys and Certificates for the Main Subsystems
, where
<instance_id>
, where
<instance_id>
Chapter 14 Managing CMS Keys and Certificates
identifies the CMS
identifies the CMS
445