Step 2. Install An Ocsp-Compliant Client; Step 3. Identify The Ca To The Ocsp Responder - Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual

Setting Up a Remote OCSP Responder

Step 2. Install an OCSP-Compliant Client

Follow the instructions as appropriate.
• If you don't want to install Netscape 6x or Personal Security Manager, skip to
the next step, "Step 3. Identify the CA to the OCSP Responder" on page 690.
• If you decided to install Netscape 6x or Personal Security Manager, follow the
instructions in section "Step 2. Install OCSP-Compliant Client" on page 676 to
install it.

Step 3. Identify the CA to the OCSP Responder

Before you configure a Certificate Manager to publish CRLs to the Online
Certificate Status Manager, you must identify the Certificate Manager to the Online
Certificate Status Manager. You do this by storing the Certificate Manager's CA
signing certificate in the internal database of the Online Certificate Status Manager.
To locate the Certificate Manager's CA signing certificate, it might be useful to
know whether it's self-signed or signed by another CA.
• If the certificate is self-signed, you can locate the certificate by searching for it
in the Retrieval tab of Certificate Manager's end-entity interface.
• If the Certificate Manager is a subordinate CA, you can locate its signing
certificate by listing the certificates in the CA certificate chain; you can
download the CA chain from the Retrieval tab of a Certificate Manager's
end-entity interface.
The steps below explain how to store the Certificate Manager's CA signing certificate
in the internal database of the Online Certificate Status Manager:
Locate the Certificate Manager's CA signing certificate.
1.
If the certificate is self-signed:
a.
b.
c.
d.
690 Netscape Certificate Management System Installation and Setup Guide • March 2002
Open a web browser window.
Go the Certificate Manager's end-entity interface. The URL is in the
https://<hostname>:<SSL_port>
format.
Select the Retrieval tab, and in the left frame, click List Certificates.
In the resulting form, click List.
or
http://<hostname>:<port>