Step 4. Configure The Certificate Manager To Publish Crls - Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual

Setting Up a Remote OCSP Responder
Go to the Online Certificate Status Manager's Agent interface. The URL is in
2.
this format: h
The Online Certificate Status Manager Agent Services interface appears.
In the left frame, click Add Certificate Authority.
3.
In the resulting form, paste the encoded CA signing certificate inside the text
4.
area labeled "Base 64 encoded certificate (including header and footer)."
Click Add.
5.
The certificate is added to the internal database of the Online Certificate Status
Manager.
To verify that the certificate is added successfully, in the left frame, click List
6.
Certificate Authorities.
The resulting form should show information about the Certificate Manager
(CA) you just added. Note the values assigned to the "This Update," "Next
Update," and "Requests Served Since Startup" fields. All three fields should
show a value of zero (0).
Keep the web browser window open. You'll need to use the same form later for
verifying that the Certificate Manager can communicate with the Online
Certificate Status Manager.
Step 4. Configure the Certificate Manager to
Publish CRLs
In this step, you configure the Certificate Manager to publish CRLs to the Online
Certificate Status Manager. Note that a configured Certificate Manager will publish
the CRL to the Online Certificate Status Manager, replacing the old CRL with the
new one; the old CRL is not saved.
To configure a Certificate Manager to publish CRLs to the directory, follow these
steps:
• Step A. Specify CRL Format and Publishing Interval
• Step B. Set the CRL Extensions
• Step C. Create a Publisher for the CRL
• Step D. Create a Publishing Rule for the CRL
• Step E. Make Sure Publishing is Enabled
692 Netscape Certificate Management System Installation and Setup Guide • March 2002
ttps://<hostname>:<port>
.