Step 1. Before You Begin - Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual

Certificate Issuance to Routers or VPN Clients

Step 1. Before You Begin

• Decide whether you want to submit the certificate request for your router to
the Certificate Manager (CA) directly or through a Registration Manager.
• Open Netscape Console, and locate the CMS instance that corresponds to the
subsystem of your interest. Make sure that the Certificate Manager is started. If
you are planning to submit the request via a Registration Manager, make sure
that both the Registration Manager and Certificate Manager (to which the
Registration Manager forwards its requests) are started.
• Open the CMS window, and verify whether the HTTP port is enabled. If it
isn't, enable it; for instructions, see "Configuring Port Numbers" on page 374.
If you are requesting the certificate for an earlier version of router software,
make sure that the HTTP port number is set to 80; earlier versions of router
software can only connect to port 80.
• Note the CEP enrollment URL. The URL is in the form
http://<hostname>:<HTTP_port>/cgi-bin/pkiclient.exe
<hostname>
• Note or print the certificate fingerprint information of the Certificate Manager
CA signing certificate. You will be required to compare this with the fingerprint
the router will show on the screen.
To locate the fingerprint information:
a.
b.
c.
d.
822 Netscape Certificate Management System Installation and Setup Guide • October 2001
is in the
<machine_name>.<your_domain>.<domain>
Go to the end-entity page hosted by the Certificate Manager.
Click the Retrieval tab.
List or search for the CA signing certificate.
Click Details.
, where
form.