Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual page 227

CA Signing Certificate. Select the "Create subordinate CA certificate request"
5.
option.
Click Next to continue.
Key-Pair Information for Certificate Manager CA signing certificate. Select
6.
the token to store the CA signing certificate and key pair. If you have not
previously initialized the token's password, you must do so in this screen. Also
specify the key type and length.
Click Next to continue.
Message Digest Algorithm. Select the algorithm to use for computing the
7.
certificate signature. The choices are: MD2, MD5, or SHA-1.
Click Next to continue.
Subject Name for Certificate Manager CA Signing Certificate. Type values
8.
for the subject DN components; these values identify the subordinate CA
signing certificate.
Click Next to continue.
Validity Period for Certificate Manager CA Signing Certificate. Select the
9.
validity period for the subordinate CA signing certificate. The default validity
is two years. The validity period determines how soon you will have to renew
the certificate, which can be a complex procedure.
Click Next to continue.
Certificate Extensions for Certificate Manager CA Signing Certificate. Select
10.
the required extensions. The default settings should work for most
deployments. If necessary, you can add an additional extension by pasting its
base-64 encoding in the space provided on this screen.
Certificate Management System provides command-line tools for generating
extensions to include in CA and other certificate requests. For details about
these tools, check this directory:
Note that the certificate extension text field accepts a single extension blob. If
you want to add multiple extensions, you should use the
which is also provided in the
program, see Chapter 5, "Extension Joiner Tool" of CMS
ExtJoiner
Command-Line Tools Guide.
Click Next to continue.
Stage 2. Running the Installation Wizard
<server_root>/bin/cert/tools
directory. For details about using the
tools
Chapter 6 Installing Certificate Management System
program,
ExtJoiner
227