Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual page 299

The Certificate Setup Wizard is integrated into the CMS window, enabling you to
accomplish the following tasks:
• Renew certificates of the CMS managers installed in a CMS instance; renewing a
certificate means getting a new certificate with the same subject name and
public and private key material as that of the existing certificate, but with an
extended validity period.
• Request and install new certificates for the CMS managers installed in a CMS
instance; reissuing or requesting a new certificate means getting a certificate
based on a new public and private key pair.
• Install CA certificates in the certificate or trust database of a CMS instance.
• Install CA certificate chains in the certificate database of a CMS instance.
When you start the wizard, which you do by clicking the Certificate Setup Wizard
button in the Encryption tab of the CMS window, you are asked to specify whether
you want to request or install a certificate. The wizard presents you with the
screens appropriate to your choice and walks you through the entire process.
For installing certificates, except for cases when the certificate is self-signed by the
CA, you will need to run the wizard twice: once, to request the certificate and once
to install the certificate. The reason for this is, if you submit the certificate request to
a non-local CA, you will have to wait for the certificate until it is delivered to you.
The following sections explain the process of requesting and installing a certificate
by using the Certificate Setup Wizard:
• Using the Wizard to Request a Certificate
• Using the Wizard to Install a Certificate or Certificate Chain
Using the Wizard to Request a Certificate
The Certificate Setup Wizard allows you to request any of the certificates used by
the Certificate Manager, Registration Manager, Data Recovery Manager, or Online
Certificate Status Manager installed in the currently selected CMS instance.
Using the wizard to request a certificate involves the following steps:
• Step 1. Select the Operation
• Step 2. Choose the Certificate
• Step 3. Specify the Key-Pair Information
• Step 4. Specify the Subject Name for the Certificate
• Step 5. Specify the Validity Period
Managing the Certificate Database
Chapter 7 Administrative Basics 299