Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual page 232

Stage 2. Running the Installation Wizard
f.
Click Next to continue.
SSL Server Certificate. Select the appropriate option:
17.
Click Next to continue.
Key-Pair Information for SSL Server Certificate. Select the token to store the
18.
SSL server certificate and key pair. If you have not previously initialized the
token's password, you must do so in this screen. Also specify the key type and
length.
Click Next to continue.
Message Digest Algorithm. Select the algorithm to use for computing the
19.
certificate signature. The choices are: SHA-1, MD2, or MD5.
Click Next to continue.
Subject Name for SSL Server Certificate. Type the values for the subject DN
20.
components; these values identify the subordinate CA's SSL server certificate.
The CN must be the fully-qualified host name of the machine on which you're
installing the Certificate Manager.
Click Next to continue.
Certificate Extensions for SSL Server Certificate. Select the required
21.
extensions. The default settings should work for most deployments. If
necessary, you can add an additional extension by pasting its base-64 encoding
in the space provided on this screen. (For details, see Step 10 of this section.)
Click Next to continue.
SSL Server Certificate Request Creation. This is an informational screen that
22.
tells you that the wizard has all the information required to generate the key
pair and certificate request. In the previous screens, if you chose to generate a
certificate request and include the Subject Key Identifier extension in the
certificate, you'll be given the choice to select the format for the certificate
request. Otherwise, the request format will be PKCS #10.
232 Netscape Certificate Management System Installation and Setup Guide • May 2002
Paste the certificate chain into the text box.
If you want to get the SSL server certificate signed by the subordinate CA
itself, select the "Sign SSL certificate with my CA signing certificate"
option.
If you want to submit the SSL server certificate request to another CA, for
example to the CA that signed the subordinate CA's signing certificate,
select the "Create request for submission to another CA" option.