Deploying Registration Manager's Signing Certificate - Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual

Open the enrollment page by going to this URL:
7.
https://<hostname>:<admin_port>/ca/adminEnroll.html
Enter all the information and request a new certificate.
8.
If you need more information on getting the first agent certificate, see "Stage 3.
Enrolling for Administrator/Agent Certificate" on page 271.
Once you get the certificate, install it in your browser.
9.
Access the Certificate Manager's agent interface using your new certificate.
10.

Deploying Registration Manager's Signing Certificate

If you installed a new Registration Manager signing certificate, you must also
install this certificate in the certificate database of all subsystems (Certificate
Manager and Data Recovery Manager) that trust this Registration Manager.
Here's what you must do:
Install the new signing certificate in the subsystems' certificate databases.
1.
Because the Registration Manager uses its signing certificate for SSL client
authentication to the subsystems, you must add the new signing certificate to
the internal database of all subsystems that have been configured to receive
requests from the Registration Manager.
To add the new certificate to a subsystem's internal database:
Note the instance ID and host name of the Registration Manager for which
you got the new signing certificate; this information will help you to
identify the Registration Manager in a subsystem's list of privileged users.
Copy the new signing certificate, in base-64 encoded format, to a text file.
Add the new certificate to the individual subsystem's internal database
following the instructions in "Changing a Privileged User's Certificate" on
page 414. Repeat this step for all subsystems that receive requests from this
Registration Manager.
Getting New Certificates for the Subsystems
Chapter 14 Managing CMS Keys and Certificates 471