Step 4. Copy Master Ca's Certificate And Key Database; Step 5. Start The Master Ca - Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual

Cloning a Certificate Manager
Step 4. Copy Master CA's Certificate and Key
Database
Because you want the clone Certificate Manager to own the same keys and
certificates as that of the master Certificate Manager, you need to make available
the keys and certificates used by the master Certificate Manager to each clone
Certificate Manager.
• If the master Certificate Manager's keys and certificates are stored in the
internal/software token, you need to copy the certificate and key database files
from the master Certificate Manager to each clone Certificate Manager. Here's
how you do this:
a.
b.
c.
d.
e.
• If the master Certificate Manager's keys and certificates are stored in the
hardware token, you need to copy the keys and certificates following the
instructions provided by the hardware-token vendor.

Step 5. Start the Master CA

Start the master Certificate Manager. If you need instructions, see "Starting
Certificate Management System" on page 306.
288 Netscape Certificate Management System Installation and Setup Guide • May 2002
In the master Certificate Manager's host machine, go to this directory:
<server_root>/alias
Locate the certificate and key database files; the file names are as follows:
cert-<instance_id>-<machine_name>-cert7.db
cert-<instance_id>-<machine_name>-key3.db
In the clone Certificate Manager's host machine, go to this directory:
<server_root>/alias
Copy the certificate and key database files from the master Certificate
Manager to the clone.
Repeat steps c and d to copy the master Certificate Manager's certificate
and key database files to the
Manager.
directory of each clone Certificate
alias