Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual page 228

Stage 2. Running the Installation Wizard
Certificate Manager CA Signing Certificate Creation. This is an informational
11.
screen that tells you that the wizard has all the information required to
generate the key pair and certificate request. In the previous screen, if you
chose to include the Subject Key Identifier extension in the certificate, you'll be
given the choice to select the format for the certificate request. Otherwise, the
request format will be PKCS #10.
Click Next to generate the request. The wizard creates a certificate request that
you must submit to another CA.
Submission of Request. Select whether you want to submit the request
12.
manually or send the request to a remote Certificate Manager automatically.
To automatically submit the request to a remote Certificate Manager (or for
automatic enrollment), follow these steps:
a.
b.
c.
d.
e.
f.
228 Netscape Certificate Management System Installation and Setup Guide • March 2002
If you want the wizard to generate the certificate request in PKCS #10
format, select the "Generate PKCS10 request" option.
If you want the wizard to generate the certificate request in CMC format,
select the "Generate CMC full enrollment request" option.
Select the "Send the request to a remote CMS now" option.
Enter the host name and end-entity port number of the remote Certificate
Manager, and select whether this end-entity port is SSL enabled.
Click Next to submit the request.
The Certificate Request Result screen appears, confirming that the request
has been submitted. Note the request ID provided in the response
message. (You can use it later to retrieve the certificate, once it has been
issued, from the end-entity port.)
Note that the request you submitted gets added to the agent queue of the
remote Certificate Manager for approval by that Certificate Manager's
agent. If you've permission to access that Certificate Manager's Agent
interface, you can follow the instructions below to issue the certificate.
Otherwise, you should wait for the other agent to approve your request
and issue the certificate.
Open a web browser window.
Enter the URL for the remote Certificate Manager's Agent Services page.
(You must use the same computer where you got your agent certificate.)
Select List Requests, then click Show Pending Requests and click Find. The
pending request list is displayed.