Step 2. Renew The Existing Certificate - Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual

Renewing Certificates for the Subsystems

Step 2. Renew the Existing Certificate

Once you have all the information, go ahead and renew the certificate. The
Certificate Setup Wizard built into the CMS window automates the process of
renewing certificates used by the CMS managers. The wizard can generate a
certificate request based on the existing key pair and submit the request to a CA for
signing. For instructions on using the wizard, see "Using the Wizard to Request a
Certificate" on page 437.
NOTE
Note that when you renew any of the CMS certificates using the wizard, it saves
the old or previous certificate (in its base-64 encoded format) to a text file in the
configuration directory, which is located here:
<server_root>/cert-<instance_id>/config
The names of the text files vary depending on the certificate you choose for
renewal. Table 14-2 lists them.
Table 14-2 Names of backup files created for old CMS certificates
Filename
prevCACert.txt.<timestamp>
prevOCSPCert.txt.<timestamp>
prevRACert.txt.<timestamp>
prevKRACert.txt.<timestamp>
prevOCSPCert.txt.<timestamp>
prevSSLCert.txt.<timestamp>
prevOtherCert.txt.<timestamp>
prevClientCert.txt.<timestamp>
476 Netscape Certificate Management System Installation and Setup Guide • May 2002
When renewing a certificate, be sure to use the existing key pair to
generate the certificate signing request.
Renewed Certificate
Certificate Manager CA signing
certificate
Certificate Manager OCSP signing
certificate
Registration Manager signing
certificate
Data Recovery Manager transport
certificate
Online Certificate Status Manager
signing certificate
SSL server certificate
Other certificates, such as Certificate
Manager CRL signing certificate or SSL
client certificate
SSL client