Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual page 334

Setting Up a Trusted Manager
certificate request, and the request has been approved, the Certificate Manager
automatically creates a user ID for the subsystem, adds this user ID to the Trusted
Managers group, copies the certificate to the database, and associates the certificate
with the subsystem's user entry.
This automated process can be used to set up trusted mangers when either a
Certificate Manager makes its SSL server certificate request to a Certificate
Manager that will trust it, or when a Registration Manager makes its signing
certificate request to a Certificate Manager that will trust it. This automated process
cannot be used to establish a trusted relationship with a Data Recovery Manager;
you must set up a trusted relationship with a Data Recovery Manager manually.
To use the automated process, the following has to happen:
• The subsystem that will be trusted makes its signing certificate request to the
Certificate Manager.
• A user who has both administrator and agent privileges with the Certificate
Manager providing trust designated this subsystem as a trusted manager by
doing the following:
Setting Up a Trusted Managers Manually
If you set up a Certificate Manager or a Registration Manager using the automated
process either during or after installation, you do not need to perform any of the
manual setup for a trusted manager.
To set up a Certificate Manager or Registration Manager as a trusted manger for a
Certificate Manager or Data Recovery Manager:
Log in to the CMS console for the Certificate Manager or a Data Recovery
1.
Manager in which this Registration Manager or Certificate Manager will be a
trusted manager, see "Logging Into the CMS Console" on page 247.
In the navigation tree, select Users and Groups. Click Add.
2.
The Edit User Information dialog opens.
334 Netscape Certificate Management System Administrator's Guide • February 2003
Selecting "This certificate is for a Trusted Manager" in the
request-approval form for this certificate.
Providing a user ID for the subsystem.
Approving the request.