Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual page 142

Installing a Registration Manager
Note that the certificate extension text field accepts a single extension blob. If
you want to add multiple extensions, you should use the
which is also provided in the
ExtJoiner
Command-Line Tools Guide.
For more information about extensions, see Appendix G, "Certificate and CRL
Extensions."
Click Next to continue.
Registration Manager Signing Certificate Request Creation. This
15.
informational screen tells you that the wizard has all the information required
to generate the key pair and certificate request. In the previous screen, if you
chose to include the Subject Key Identifier extension in the certificate, you'll be
given the choice to select the format for the certificate request. Otherwise, the
request format will be PKCS #10.
Click Next. The wizard creates a certificate request that you must submit to a
CA, which could be a remote Certificate Manager or a third-party CA.
Submission of Request. Select whether you want to submit the request
16.
manually or send the request automatically to a remote Certificate Manager.
142 Netscape Certificate Management System Administrator's Guide • February 2003
program, see Chapter 5, "Extension Joiner Tool" of CMS
If you want the wizard to generate the certificate request in PKCS #10
format, select the "Generate PKCS10 request" option.
If you want the wizard to generate the certificate request in CMC format,
select the "Generate CMC full enrollment request" option. (This option is
available only if you selected to add the Subject Key Identifier extension to
the certificate in the previous.)
To automatically submit the request to a remote Certificate Manager (or for
automatic enrollment), follow these steps:
Select the "Send the request to a remote CMS now" option.
I.
Enter the host name and end-entity port number of the remote
II.
Certificate Manager, and specify whether the end-entity port is SSL
enabled.
Click Next to submit the request.
III.
The Certificate Request Result screen appears, confirming that the
request has been submitted. Note the request ID provided in the
response message. (You can use it later to retrieve the certificate, once
it has been issued, from the end-entity port.)
directory. For details on using the
tools
program,
ExtJoiner