Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual page 428

Generating Files Required By Third-Party Object Signing Tools
Type the following line below it:
5.
Enroll.PVKFilename = "<pvk_file_path>"
Your changes should look like this:
...
Enroll.GenKeyFlags = 1
Enroll.PVKFilename = "<pvk_file_path>"
szCertReq = Enroll.createPKCS10(szName, "1.3.6.1.5.5.7.3.2")
...
Replace
6.
the directory in which you want the private key file created; for example,
"C:\myKey.PVK"
double quotes.
Optionally, you may further edit the form to include a text field for entering
7.
the file path.
Save your changes.
8.
Now use the form to issue an object-signing certificate.
9.
If your users need to generate Software Publishing File (SPC) files for their
object-signing certificates, you should ask them to use the Microsoft tool named
cert2spc
signcode -spc myCert.spc -v myKey.pvk file.exe
Here's how a user can create a SPC file for an object-signing certificate:
Open a web browser window.
1.
Go to the End Entity Services interface.
2.
Locate the object-signing certificate for which you want to create the SPC file.
3.
Scroll down the page (that shows the certificate information in detail) to find
4.
the certificate in base-64 encoded format. It looks like this:
-----BEGIN CERTIFICATE-----
MIICJzCCAZCgAwIBAgIBAzANBgkqhkiG9w0BAQQFADBCMSAwHgYDVQQKExdOZXRz
Y2FwZSBD
b21tdW5pY2F0aW9uczngjhnMVQ2VydGlmaWNhdGUgQXV0aG9yaXR5MB4XDTk4MDg
yNzE5MDw
MFoXDTk5MDIyMzE5MDAwMnbjdgngYoxIDAeBgNVBAoTF05ldHNjYXBlIENvbW11b
mljYXRpb
25zMQ8wDQYDVQQLEwZQZW9wbGUxFzAVBgoJkiaJkIsZAEBEwdzdXByaXlhMRcwFQ
YDVQQDw5
TdXByaXlhIFNoZXR0eTEjMCEGCSqGSIb3DbndgJA
428 Netscape Certificate Management System Administrator's Guide • February 2003
<pvk_file_path>
. Be sure to use the
. The SPC file enables them to execute commands such as this:
' key exportable
with the absolute path, including the filename, to
extension and to enclose the path in
.PVK