Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual page 399

• Make sure that the Registration Manager has the certificate you want it to use
for SSL client authentication to the subsystem that will trust it; by default, the
Registration Manager uses its signing certificate for this purpose. The certificate
must be currently valid; the certificate must not have expired, been revoked, or
been signed by an authority untrusted by the subsystem. For details, see
"Trusted Manager's Certificate for SSL Client Authentication" on page 383.
• Locate the certificate in base-64 encoded format. Copy the certificate, including
the
-----BEGIN CERTIFICATE-----
marker lines, to a text file.
• Identify the subsystem—Certificate Manager or Data Recovery Manager—to
which you want to connect the Registration Manager. Note details, such as the
host name and port number of that subsystem.
• If you are planning to connect the Registration Manager to a Certificate
Manager, keep this in mind: during the installation of a Registration Manager,
you generated a signing certificate for the Registration Manager. If you
requested the signing certificate from a Certificate Manager, you were given an
opportunity to add the Registration Manager as a trusted manager to that
Certificate Manager's database. If you chose this option, then the Registration
Manager is already set up to function as a trusted manager to that Certificate
Manager—in this case, you are not required to go through these steps.
Step 2. Create a User Entry for the Registration Manager
In this step, you create a privileged-user entry for the Registration Manager in the
internal database of the subsystem. As a part of creating this entry, you also add
the user entry to the
Trusted Managers
privileges to the agent port of the subsystem.
To create a user entry with appropriate access privileges for a Registration
Manager:
Log in to the CMS window for the subsystem (see "Logging In to the CMS
1.
Window" on page 333). For the purposes of completing these instructions, let
us assume that the subsystem is a Certificate Manager.
and
-----END CERTIFICATE-----
group in order to give the entry access
Chapter 13 Managing Privileged Users and Groups
Setting Up Privileged Users
399