Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual page 238

Stage 2. Running the Installation Wizard
Remote Data Recovery Manager. Select the appropriate options:
3.
Click Next to continue.
Network Configuration. Type the numbers for the ports to be used by the
4.
CMS instance. If you want to enable the non-SSL end-entity port, be sure to
check the "Enable" checkbox.
Click Next to continue.
Key-Pair Information for Registration Manager Signing Certificate. Select
5.
the token to store the Registration Manager signing certificate and key pair. If
you have not previously initialized the token's password, you must do so in
this screen. Also specify the key type and length.
Click Next to continue.
Message Digest Algorithm. Select the algorithm to use for computing the
6.
certificate signature. The choices are: SHA-1, MD2, or MD5.
Click Next to continue.
Subject Name for Registration Manager Signing Certificate. Type the values
7.
for the subject DN components; these values identify the Registration
Manager's signing certificate.
Click Next to continue.
Certificate Extensions for Registration Manager Signing Certificate. Select
8.
the required extensions. The default settings should work for most
deployments. If necessary, you can add an additional extension by pasting its
base-64 encoding in the space provided on this screen.
Certificate Management System provides command-line tools for generating
extensions to include in CA and other certificate requests. For details about
these tools, check this directory:
238 Netscape Certificate Management System Installation and Setup Guide • May 2002
Select No, if you don't want to connect the Registration Manager to a
remote Data Recovery Manager.
If you have already installed a remote Data Recovery Manager that you
want the Registration Manager to use for archiving end users' encryption
private keys, select Yes. Then, enter the remote Data Recovery Manager's
host name and agent port number in the associated fields.
<server_root>/bin/cert/tools