Key-Pair Information For Ca Signing Certificate; Subject Name For Ca Signing Certificate - Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual

Certificate Manager Configuration
• CA's ending serial number __________________________
Enter the highest serial number available for this CA. You can enter the
number in decimal or hexadecimal (0xnn). The default is no upper limit
(blank).

Key-Pair Information for CA Signing Certificate

For a discussion of related issues, see "CA Signing Key Type and Length" on
page 170.
• Token for storing the Certificate Manager CA signing certificate and private
key____________________________________
Enter either
name of an external token. If you are using an external token, you will need to
install it before you run the Installation Wizard. In the wizard, you can select
from a list of already installed and available tokens. For example,
For installation instructions, see "Installing External Tokens" on page 432.
• Token password_________________________________________________
The password for the token must be at least eight character long.
• Key type_________________________________________________
RSA or DSA.
• Key length_______________________________________________
Available key sizes for RSA are 512, 768, 1024, 2048, 4096, or Custom. Available
key sizes for DSA are 512, 1024, or Custom (which must be in increments of 64
bits only).
In general, longer keys are considered to be cryptographically stronger than
shorter keys. However, longer keys also require more time for signing
operations.
• Message Digest Algortihm (select one): SHA1___ MD2___ MD5_____
Select the message digest algorithm to use for generating digital signatures on
certificates.

Subject Name for CA Signing Certificate

For a discussion of issues related to the subject name, see "CA's Distinguished
Name" on page 170.
194 Netscape Certificate Management System Installation and Setup Guide • May 2002
(if you plan to use the internal/software token) or the
internal
.
SmartCard