Step D. Configure Key Archival Policies - Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual

Paste the certificate as the value of the
f.
Paste the certificate in front of the
the certificate within double-quotation marks (
a semicolon (
characters in the encoded blob.
An example is shown below:
var kraTransportCert =
"MIICDjCCAXegAwIBAgICAfMwDQYJKoZIhvcNAQEEBQAwdzELMAkGA1UEBhMCVVMxLDA
qBgNVBAoTI05ldHNjYXBlIENvbW11bmljYXRpb25zIENvcnBvcmF0aW9uMREwDwYDVQQ
LEwhIYXJkY29yZTEnMCUGA1UEAxMeSGFyZGNvcmUgQ2VydGlmaWNhdGUgU2VydmVyIEl
JMB4XDTk4MTExOTIzNDIxOVoXDTk5MDUxODIzNDIxOVowLjELMAkGA1UEBhMCVVMxETA
PBgNVBAoTCG5ldHNjYXBlMQwwCgYDVQQDEwNLUmEwXDANBgkqhkiG9w0BAQEFAANLADB
IAkEArrbDiYUI5SCdlCKKa0bEBn1m83kX6bdhytRYNkdHB95Bp85SR";
Pass the
g.
kraTransportCert
Replace
null
Specify the key algorithm and key type (see "
h.
Javascript API for Client Certificate Management).
Below is an example that shows how the updated
generateCRMFRequest()
// generate keys for PSM.
if (navigator.appName == "Netscape" && (navMajorVersion() > 3) &&
typeof(crypto.version) != "undefined") {
certNickname.value = subject.value;
crmfObject = crypto.generateCRMFRequest(subject.value,
}
The method triggers the client to generate two RSA key pairs—one key of
length 512 for encrypting data and another key of length 1024 for signing
data.
Save your changes.
i.

Step D. Configure Key Archival Policies

This step is optional.
). When deleting line breaks, be sure not to delete any of the
;
variable to the JavaScript method.
(the fourth line in the method) with
method would look:
"regToken",
"authenticator",
kraTransportCert,
"setCRMFRequest();",
512, null, "rsa-ex",
1024, null, "rsa-sign");
Chapter 22
Configuring Key Archival and Recovery Process
kraTransportCert
sign, remove any line breaks, enclose
=
), and end the string with
""
kraTransportCert
generateCRMFRequest()
Setting Up Key Archival and Recovery
variable.
.
" in
737