Step 3. Request The Ca's Certificate; Step 4. Submit The Certificate Request To The Ca - Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual

Step 3. Request the CA's Certificate

In this part of the operation, you identify the CA to the router, thus enabling the
router to authenticate the CA from which it will request the certificate. You also
verify whether the router is talking to the right CA; you do this manually.
Here's what you should do:
Run the appropriate command to get the CA certificate.
1.
The command will ask you to specify the following:
An identity for the CA. You can give any identity; choose something you
will remember, since you will be required to provide it when you submit
the certificate request.
The CA's enrollment URL; this is the enrollment URL you identified in
Step 1.
The router gets the CA certificate and displays its fingerprint on your screen.
2.
Verify the fingerprint on your screen with the one you noted down in
3.
Step 1.
If it matches, the router is talking to the right CA.

Step 4. Submit the Certificate Request to the CA

To submit the certificate request to the CA:
Run the appropriate command.
1.
The command will ask you for certain information:
The CA's identity. You specified this in Step 3.
Challenge password. If you enter one, write it down; you will be required
to specify this password to revoke the certificate.
The CEP enrollment URL.
Whether you want to include the router's serial number in the request. If
you choose to include the serial number, it will be included in the
certificate's subject name.
Whether you want to include the router's IP address in the request. If you
choose to include the IP address, it will be included in the certificate's
subject name.
Certificate Issuance to Routers or VPN Clients
Chapter 25 Setting Up CEP Enrollment 803