Managing The Certificate Database; Viewing The Certificate Database Content - Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual

Managing the Certificate Database

Managing the Certificate Database
Each CMS instance has a certificate database (
internal token. This database contains certificates belonging to the subsystems
installed in the CMS instance (see "Keys and Certificates for the Main Subsystems"
on page 436) and various CA certificates the subsystems use for validating the
certificates they receive.
Whether you use an internal token or an external token for generating and storing
key pairs, Certificate Management System always maintains its list of trusted and
untrusted CA certificates in its internal token.
You may need to add new certificates to the database, remove unwanted
certificates from the database, or change the trust settings of CA certificates in the
database. This section explains how to view the contents of the certificate database,
delete unwanted certificates, and change the trust settings of CA certificates
installed in the database using the CMS window. For information on adding
certificates to the database, see "Certificate Setup Wizard" on page 456.
NOTE

Viewing the Certificate Database Content

Each CMS instance has a certificate database that contains the list of certificates the
server uses. To view the contents of the database:
Log in to the CMS window (see "Logging In to the CMS Window" on
1.
page 343).
502 Netscape Certificate Management System Installation and Setup Guide • October 2001
Certificate Management System also provides a command-line
utility called
certutil
details, check CMS Command-Line Tools Guide.
), which is maintained in its
cert7.db
for managing its certificate database. For