Certificate Setup Wizard - Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual

Certificate Setup Wizard

Certificate Setup Wizard
Certificate Management System provides a wizard, called the Certificate Setup
Wizard, which automates the process of requesting and installing the certificates
required by the CMS managers—Certificate Manager, Registration Manager, Data
Recovery Manager, and Online Certificate Status Manager—installed in the
currently selected CMS instance. For details about these certificates, see "Keys and
Certificates for the Main Subsystems" on page 436.
The Certificate Setup Wizard is integrated into the CMS window, enabling you to
accomplish the following tasks:
• Renew certificates of the CMS managers installed in a CMS instance; renewing a
certificate means getting a new certificate with the same subject name and
public and private key material as that of the existing certificate, but with an
extended validity period.
• Request and install new certificates for the CMS managers installed in a CMS
instance; reissuing or requesting a new certificate means getting a certificate
based on a new public and private key pair.
• Install CA certificates in the certificate or trust database of a CMS instance.
• Install CA certificate chains in the certificate database of a CMS instance.
When you start the wizard, which you do by clicking the Certificate Setup Wizard
button in the Encryption tab of the CMS window (see the figure on page 454), you
are asked to specify whether you want to request or install a certificate. The wizard
presents you with the screens appropriate to your choice and walks you through
the entire process.
For installing certificates, except for cases when the certificate is self-signed by the
CA, you will need to run the wizard twice: once, to request the certificate and once
to install the certificate. The reason for this is, if you submit the certificate request to
a non-local CA, you will have to wait for the certificate until it is delivered to you.
The following sections explain the process of requesting and installing a certificate
by using the Certificate Setup Wizard:
• Using the Wizard to Request a Certificate
• Using the Wizard to Install a Certificate or Certificate Chain
For instructions on getting new certificates, see "Getting New Certificates for the
Subsystems" on page 485. For instructions on renewing existing certificates, see
"Renewing Certificates for the Subsystems" on page 494.
456 Netscape Certificate Management System Installation and Setup Guide • October 2001