Online Certificate Status Manager Configuration
Online Certificate Status Manager Signing
Certificate Request
When you install a Online Certificate Status Manager, you must supply
information for the certificate that the Online Certificate Status Manager will use to
sign OCSP responses. The Installation Wizard formulates a certificate request on
the basis of information you provide. It is possible for the CA that issues the
certificate to overrule some of your decisions.
Key-Pair Information for Online Certificate Status Manager Signing
Certificate
•
Token for storing the Online Certificate Status Manager signing certificate and
private key____________________________________
Enter either
external token. If you are using an external token, you will need to install it
before you run the Installation Wizard. In the wizard, you can select from a list
of already installed and available tokens. For example,
installation instructions, see "Installing External Tokens" on page 432.
•
Token password_________________________________________________
The password for the token must be at least one character long.
•
Key type_________________________________________________
RSA or DSA.
•
Key length_______________________________________________
Available key sizes for RSA are 512, 768, 1024, 2048, 4096, or Custom. Available
key sizes for DSA are 512, 1024, or Custom (in increments of 64 bits only).
In general, longer keys are considered to be cryptographically stronger than
shorter keys. However, longer keys also require more time for signing
operations.
•
Message Digest Algortihm (select one): SHA1___ MD2___ MD5___
Select the message digest algorithm to use for generating digital signatures on
certificates.
Subject Name for Online Certificate Status Manager Signing
Certificate
•
Common Name (CN=) _____________________________________
204
Netscape Certificate Management System Installation and Setup Guide • May 2002
(if you plan to use the internal token) or the name of an
internal
. For
SmartCard
Need help?
Do you have a question about the NETSCAPE MANAGEMENT SYSTEM 6.01 and is the answer not in the manual?