Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual page 104

Installing a Certificate Manager
f.
Click Next to continue.
SSL Server Certificate. Select the appropriate option:
24.
Click Next to continue.
Key-Pair Information for SSL Server Certificate.
25.
See "Signing Key Type and Length" on page 88 for more information.
Click Next to continue.
Message Digest Algorithm. Select the algorithm to use for computing the
26.
certificate signature. The choices are: SHA-1, MD2, or MD5.
Click Next to continue.
Subject Name for SSL Server Certificate. Type the values for the subject DN
27.
components; these values identify the subordinate CA's SSL server certificate.
The CN must be the fully-qualified host name of the machine on which you're
installing the Certificate Manager.
Click Next to continue.
Certificate Extensions for SSL Server Certificate. Select the required
28.
extensions. The default settings should work for most deployments. If
necessary, you can add an additional extension by pasting its base-64 encoding
in the space provided on this screen. (For details, see Step 17 of this section.)
104 Netscape Certificate Management System Administrator's Guide • February 2003
Paste the certificate chain into the text box.
If you want to get the SSL server certificate signed by the subordinate CA
itself, select the "Sign SSL certificate with my CA signing certificate"
option.
If you want to submit the SSL server certificate request to another CA, for
example to the CA that signed the subordinate CA's signing certificate,
select the "Create request for submission to another CA" option.
Token. Enter either
internal
token) or the name of an external token. If you have not previously
initialized the token's password, you must do so in this screen. See
"Tokens," on page 91 for more information.
Key Type. Choose RSA.
Key Length. Available key sizes for RSA are 512, 768, 1024, 2048, 4096, or
Custom. Available key sizes for DSA are 512, 1024, or Custom (which must
be in increments of 64 bits only).
(if you plan to use the internal/software