Getting An Ssl Client Certificate For A Subsystem - Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual

Configuring the Server's Security Preferences
Change the configuration:
4.
Save your changes.
5.
Start the server; see "Starting Certificate Management System" on page 312.
6.
Getting an SSL Client Certificate for a
Subsystem
By default, the Certificate Manager uses its SSL server certificate for SSL client
authentication to the publishing directory. For details about publishing certificates
and CRLs to a directory, see Chapter 19, "Setting Up LDAP Publishing."
If you want the Certificate Manager to use another certificate for authenticating to
the publishing directory, you can do so. This section provides instructions for
requesting and installing an SSL client certificate for a Certificate Manager and
configuring it to use that certificate for SSL client authentication to the publishing
directory.
Log in to Netscape Console; see "Logging In to Netscape Console" on
1.
page 336.
480 Netscape Certificate Management System Installation and Setup Guide • October 2001
To change the certificate used for authenticating to the Agent Services
interface, locate the
agentGateway.https.nickName
change its value to the nickname of the new SSL server certificate. For
example, if the nickname of the SSL server certificate is
the configuration should look like this:
agentGateway.https.nickName=ServerCert_agt cert-<instance_id>
To change the certificate used for authenticating to the end-entity services
interface, locate the
eeGateway.https.nickName
value to the nickname of the new SSL server certificate. For example, if the
nickname of the SSL server certificate is
should look like this:
eeGateway.https.nickName=ServerCert_ee cert-<instance_id>
To change the certificate used for authenticating to the administration
interface, Netscape Console, locate the
and change its value to the nickname of the new SSL server certificate. For
example, if the nickname of the SSL server certificate is
, the configuration should look like this:
ServerCert_admin
radm.https.nickName=ServerCert_admin cert-<instance_id>
parameter and
ServerCert_agt
parameter and change its
, the configuration
ServerCert_ee
radm.https.nickName
,
parameter