Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual page 244

Stage 2. Running the Installation Wizard
Message Digest Algorithm. Select the algorithm to use for computing the
16.
certificate signature. The choices are: SHA-1, MD2, or MD5.
Click Next to continue.
Subject Name for SSL Server Certificate. Type the values for the subject DN
17.
components; these values identify the Registration Manager's SSL server
certificate. The CN must be the fully-qualified host name of the machine on
which you're installing the Registration Manager.
Click Next to continue.
Certificate Extensions for SSL Server Certificate. Select the required
18.
extensions. The default settings should work for most deployments. If
necessary, you can add an additional extension by pasting its base-64 encoding
in the space provided on this screen. (For details, see Step 8 of this section.)
Click Next to continue.
SSL Server Certificate Request Creation. This is an informational screen that
19.
tells you that the wizard has all the information required to generate the key
pair and certificate request. In the previous screen, if you chose to include the
Subject Key Identifier extension in the certificate, you'll be given the choice to
select the format for the certificate request. Otherwise, the request format will
be PKCS #10.
Click Next. The wizard creates the certificate request that you must submit to
another CA.
Submission of Request. Select whether you want to submit the request
20.
manually or send the request automatically to a remote Certificate Manager.
To automatically submit the request to a remote Certificate Manager (or for
automatic enrollment), follow these steps:
a.
b.
244 Netscape Certificate Management System Installation and Setup Guide • March 2002
If you want the wizard to generate the certificate request in PKCS #10
format, select the "Generate PKCS10 request" option.
If you want the wizard to generate the certificate request in CMC format,
select the "Generate CMC full enrollment request" option.
Select the "Send the request to a remote CMS now" option.
Enter the host name and end-entity port number of the remote Certificate
Manager, and select whether the end-entity port is SSL enabled.