Step 2: Specify Ip Addresses - Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual

Configuring Port Numbers
Save your changes.
4.

Step 2: Specify IP Addresses

This step is optional.
You can configure CMS instances to listen to specific IP addresses. For example,
you can install the Certificate Manager and Data Recovery Manager on a single
host, in separate instances, and then configure the instances so that the Certificate
Manager is served on one IP address and the Data Recovery Manager is served on
another address.
To clarify this further, consider the machine that hosts the Certificate Manager and
Data Recovery Manager has two Ethernet cards that respond to the IP addresses
197.1.137.97
to port 443 for the IP address
listen to port 443 for the IP address
To configure a CMS instance to listen to specific IP addresses:
In the
1.
Edit the value assigned to
2.
Save your changes and close the file.
3.
Restart the CMS instance; see "Restarting Certificate Management System" on
4.
page 312.
364 Netscape Certificate Management System Installation and Setup Guide • March 2002
Similarly, for issuing certificates to routers (using the CEP protocol), the
port must be enabled. For details, see Chapter 25, "Setting Up CEP
Enrollment."
To change the end-entity HTTPS port, locate this line and edit the value
assigned to :
port
<LS id="eeSSL" ip="0.0.0.0" port="443" security="on"
acceptorthreads="1" blocking="no">
Certificate Management System uses this port for SSL-enabled
communications with the end entity services interface—that is, HTTPS
requests from end entities during certificate enrollment, renewal, and
revocation.
If you don't want end-entity interaction with a subsystem, for example, if
you don't want end entities to interact with a Certificate Manager, you can
disable this port too (in addition to the HTTP port).
and
197.1.137.98
file, locate the lines specified in Step 1 above.
server.xml
. You can set up the Certificate Manager to listen
and the Data Recovery Manager to
197.1.137.97
.
197.1.137.98
.
ip