Using The Wizard To Install A Certificate Or Certificate Chain - Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual

Certificate Setup Wizard
Using the Wizard to Install a Certificate or
Certificate Chain
The Certificate Setup Wizard allows you to install or import the following
certificates into either an internal or external token used by the currently selected
CMS instance:
• Any of the certificates used by a Certificate Manager, Registration Manager,
Data Recovery Manager, and Online Certificate Status Manager
• Any other trusted CA certificates (certificates of CAs that you want to trust)
• Certificate chains
A certificate chain typically includes a collection of certificates: the subject
certificate, the trusted root CA certificate, and any intermediate CA certificates
needed to link the subject certificate to the trusted root. However, the
certificate chain the wizard allows you to import must include only CA
certificates; none of the certificates can be a user certificate.
In a certificate chain, each certificate in the chain is encoded as a separate
DER-encoded object. When the wizard imports a certificate chain, it imports
these objects one after the other, all the way up the chain to the last certificate,
which may or may not be the root CA certificate. If any of the certificates in the
chain already exist in the local certificate database, the wizard replaces them by
the ones included in the chain. If the chain includes intermediate CA
certificates, the wizard adds them to the certificate database as untrusted CA
certificates.
The certificate or certificate chain you provide to the wizard for installation must
be in one of the data formats supported by the wizard. This is explained in "Data
Formats for Installing Certificates and Certificate Chains" on page 453.
Using the wizard to install a certificate or certificate chain involves the following
steps, described in detail on page 454:
• Step 1. Select the Operation
• Step 2. Select the Certificate or Certificate Chain
• Step 3. Specify the Location of the Certificate
• Step 4. View the Certificate or Certificate Chain
• Step 5. Install the Certificate or Certificate Chain
• Step 6. Verify the Certificate Status
452 Netscape Certificate Management System Installation and Setup Guide • May 2002