CA Signing Certificate Request
If you are installing a subordinate CA, you need to specify where to send your
request for a CA signing certificate.
If you are submitting your certificate request to a third-party CA, follow the
instructions provided by that CA.
If you are submitting your certificate request to another Certificate Manager, you
need to know its URL:
•
End-entity URL for issuing Certificate Manager___________________________
Enter the URL for the end-entity gateway of the Certificate Manager that will
issue the subordinate CA's signing certificate. For example,
https://<hostname>:443/
Registration Manager Configuration
This section summarizes information required to configure a Registration
Manager.
Registration Manager Signing Certificate
Request
When you install a Registration Manager, you must supply information for the
certificate that the Registration Manager will use to sign certificate requests. This
certificate also functions as the Registration Manager's SSL client certificate. The
Installation Wizard formulates a certificate request on the basis of information you
provide. It is possible for the CA that issues the certificate to overrule some of your
decisions.
Key-Pair Information for Registration Manager Signing Certificate
•
Token for storing the Registration Manager signing certificate and private
key____________________________________
Enter either
external token. If you are using an external token, you will need to install it
before you run the Installation Wizard. In the wizard, you can select from a list
of already installed and available tokens. For example,
installation instructions, see "Installing External Tokens" on page 432.
.
(if you plan to use the internal token) or the name of an
internal
Registration Manager Configuration
. For
SmartCard
Chapter 5
Installation Worksheet
197