Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual page 94

Installing a Certificate Manager
Click Next to continue.
Message Digest Algorithm. Select the algorithm to use for computing the
14.
certificate signature. The choices are: MD2, MD5, or SHA-1.
Click Next to continue.
Subject Name for Certificate Manager CA Signing Certificate. Type values
15.
for the subject DN components; these values identify the root CA signing
certificate.
A DN is a series of name-value pairs that in combination uniquely identify an
entity. The subject DN identifies the CA signing certificate. You are not
required to enter all the values.
See "CA's Distinguished Name" on page 88 for more information.
Click Next to continue.
Validity Period for Certificate Manager CA Signing Certificate. Select the
16.
validity period for the CA signing certificate. The default validity is two years.
The validity period determines how soon you will have to renew the
certificate, which can be a complex procedure.
See "CA Signing Certificate's Validity Period" on page 88 for more
information.
Click Next to continue.
Certificate Extensions for Certificate Manager CA Signing Certificate. Select
17.
the required extensions. The default settings should work for most
deployments. If necessary, you can add an additional extension by pasting its
base-64 encoding in the space provided on this screen.
CMS provides command-line tools for generating extensions to include in CA
and other certificate requests. For details about these tools, check this directory:
<server_root>/bin/cert/tools
Note that the certificate extension text field accepts a single extension blob. If
you want to add multiple extensions, you should use the
which is also provided in the
ExtJoiner
94 Netscape Certificate Management System Administrator's Guide • February 2003
Key Length. Available key sizes for RSA are 512, 768, 1024, 2048, 4096, or
Custom. Available key sizes for DSA are 512, 1024, or Custom (which must
be in increments of 64 bits only).
See "Signing Key Type and Length" on page 88 for more information.
program, see the CMS Command-Line Tools Guide.
directory. For details on using the
tools
program,
ExtJoiner