Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual page 225

Token. Enter either
token) or the name of an external token to store the SSL server and key
pair. If you have not previously initialized the token's password, you must
do so in this screen. See "Tokens," on page 217 for more information.
Key Type. Choose RSA.
Key Length. Available key sizes for RSA are 512, 768, 1024, 2048, 4096, or
Custom. Available key sizes for DSA are 512, 1024, or Custom (which must
be in increments of 64 bits only).
See "Key Type and Length" on page 217 for more information.
Click Next to continue.
Message Digest Algorithm. Select the algorithm to use for computing the
22.
certificate signature. The choices are: SHA-1, MD2, or MD5.
Click Next to continue.
Subject Name for SSL Server Certificate. Type the values for the subject DN
23.
components; these values the Data Recovery Manager's SSL server certificate.
The CN must be the fully-qualified host name of the machine on which you're
installing the Data Recovery Manager.
Click Next to continue.
Certificate Extensions for SSL Server Certificate. Select the required
24.
extensions. The default settings should work for most deployments. If
necessary, you can add an additional extension by pasting its base-64 encoding
in the space provided on this screen. (For details, see Step 11 of this section.)
Click Next to continue.
SSL Server Certificate Request Creation. This is an informational screen that
25.
tells you that the wizard has all the information required to generate the key
pair and certificate request. In the previous screen, if you chose to include the
Subject Key Identifier extension in the certificate, you'll be given the choice to
select the format for the certificate request. Otherwise, the request format will
be PKCS #10.
If you want the wizard to generate the certificate request in PKCS #10
format, select the "Generate PKCS10 request" option.
If you want the wizard to generate the certificate request in CMC format,
select the "Generate CMC full enrollment request" option.
Click Next. The wizard generates a certificate request that you must submit to
a CA.
Installing a Standalone Data Recovery Manager
(if you plan to use the internal/software
internal
Chapter 6 Data Recovery Manager 225