Installing A New Ca Certificate In The Certificate Database - Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual
Hide thumbs
Also See for NETSCAPE MANAGEMENT SYSTEM 4.5:
Table of Contents
Advertisement
The window shows detailed information about the selected certificate,
including serial number, validity period, subject name, issuer name, certificate
fingerprint, and trust status.
If the certificate you selected is currently trusted, the window shows a button
named "Change to Untrusted." If it is untrusted, the window shows a button
named "Change to Trusted."
Click "Change to Untrusted" or "Change to Trusted," as appropriate.
5.
Click Close.
6.
You are returned to the Certificate Database Management window. The
certificate now shows a different trust status.
Click Close.
7.
You are returned to the Encryption tab.
To save your changes, click Save.
8.
The CMS configuration is modified. If the changes you made require you to
restart the server, you will be prompted accordingly. In that case, restart the
server.
Installing a New CA Certificate in the Certificate
Database
You may need to install new trusted CA certificates in the certificate database of a
CMS instance. For example, assume that you renewed the signing certificate of a
Registration Manager. Also assume that the CA that signed the Registration
Manager's certificate is not included in the trust database of the Certificate
Manager that has been configured to sign certificate requests from this Registration
Manager.
When the Registration Manager attempts to request a service from the Certificate
Manager (using the renewed certificate for SSL client authentication), the
Certificate Manager fails to authenticate the Registration Manager. This happens
because, as a part of validating the certificate presented by the Registration
Manager, the Certificate Manager checks its certificate database for the CA that
signed the Registration Manager's certificate. The Certificate Manager does not
find the CA listed in its trust database as a trusted CA, so it rejects the Registration
Manager's service request.
Managing the Certificate Database
Chapter 14
Managing CMS Keys and Certificates
507
Advertisement
Table of Contents
