Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual page 266

Stage 2. Running the Installation Wizard
Certificate Extensions for SSL Server Certificate. Select the required
13.
extensions. The default settings should work for most deployments. If
necessary, you can add an additional extension by pasting its base-64 encoding
in the space provided on this screen.
Certificate Management System provides command-line tools for generating
extensions to include in CA and other certificate requests. For details about
these tools, check this directory:
Note that the certificate extension text field accepts a single extension blob. If
you want to add multiple extensions, you should use the
which is also provided in the
ExtJoiner
Command-Line Tools Guide.
Click Next to continue.
SSL Server Certificate Request Creation. This is an informational screen that
14.
tells you that the wizard has all the information required to generate the key
pair and certificate request. In the previous screen, if you chose to include the
Subject Key Identifier extension in the certificate, you'll be given the choice to
select the format for the certificate request. Otherwise, the request format will
be PKCS #10.
Click Next. The wizard generates the certificate request that you must submit
to a CA.
Submission of Request. Select whether you want to submit the request
15.
manually or send the request to a remote CMS server (Certificate Manager or
Registration Manager) automatically.
To automatically submit the request to a remote Certificate Manager (or for
automatic enrollment), follow these steps:
a.
b.
266 Netscape Certificate Management System Installation and Setup Guide • March 2002
program, see Chapter 5, "Extension Joiner Tool" of CMS
If you want the wizard to generate the certificate request in PKCS #10
format, select the "Generate PKCS10 request" option.
If you want the wizard to generate the certificate request in CMC format,
select the "Generate CMC full enrollment request" option.
Select the "Send the request to a remote CMS now" option.
Enter the host name and end-entity port number of the Certificate
Manager, and select whether this end-entity port uses SSL.
<server_root>/bin/cert/tools
directory. For details on using the
tools
program,
ExtJoiner