Step 2. Request The New Certificate; Step 3. Install The New Certificate - Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual

Getting New Certificates for the Subsystems
Determine the token for generating the key pair
Identify the token, internal or external, that you want to use to generate the key
pair for the certificate and to store the certificate. For details, see "Tokens for
Storing CMS Keys and Certificates" on page 431. If you want to use an existing
token, you must know the password that protects the token. If the token is external,
make sure that the token is installed properly; for instructions, see "Installing
External Tokens" on page 432.
Determine certificate formulation information
Decide on the subject DN and nickname for the certificate you want generate. Also
decide on details such as the key algorithm, key size, extensions, and validity
period for the certificate.

Step 2. Request the New Certificate

Once you have all the information, go ahead and request the certificate. The
Certificate Setup Wizard built into the CMS window automates the process of
requesting certificates used by the CMS managers. You can use this wizard to
generate a new certificate request and submit the request to any CA for signing.
For instructions, see "Using the Wizard to Request a Certificate" on page 437.

Step 3. Install the New Certificate

When you receive the certificate from the CA, you must install it in the token that
contains the key pair for this certificate; it must be the token you used to generate
the request in Step 2 above.
The Certificate Setup Wizard automates the process of installing certificates used
by the CMS managers. You can use this wizard to install the new certificate. For
instructions, see "Using the Wizard to Install a Certificate or Certificate Chain" on
page 452.
Chapter 14 Managing CMS Keys and Certificates 469