Netscape MANAGEMENT SYSTEM 6.2 - ADMINISTRATOR Administrator's Manual page 144

Installing a Registration Manager
Certificate Details. This is an informational screen that displays the certificate
19.
so you can inspect its contents. Notice the nickname assigned to the certificate
and verify that you're installing the correct certificate.
Click Next to continue.
Import Certificate Chain. This screen appears only if you need to import the
20.
CA certificate chain. If the CA that issued the certificate is a Certificate
Manager, follow these steps:
a.
b.
c.
d.
e.
f.
Click Next to continue.
Key-Pair Information for SSL Server Certificate.
21.
See "Signing Key Type and Length" on page 136 for more information.
Click Next to continue.
Message Digest Algorithm. Select the algorithm to use for computing the
22.
certificate signature. The choices are: SHA-1, MD2, or MD5.
Click Next to continue.
144 Netscape Certificate Management System Administrator's Guide • June 2003
Go to the end-entity URL for the remote Certificate Manager that issued
the Registration Manager's signing certificate.
Select the Retrieval tab, and in the left-hand frame, click Import CA
Certificate Chain.
In the resulting form, select the "Display the CA certificate chain in
PKCS#7 for importing into a server" option, and then click Submit.
In the resulting page, locate the CA certificate chain in its base-64 encoded
format, and copy the certificate chain to the clipboard.
Return to the Installation Wizard.
Paste the certificate chain into the text box.
Token. Enter either
internal
token) or the name of an external token to store the SSL server certificate
and key pair. If you have not previously initialized the token's password,
you must do so in this screen. See "Tokens," on page 137 for more
information.
Key Type. Choose RSA.
Key Length. Available key sizes for RSA are 512, 768, 1024, 2048, 4096, or
Custom. Available key sizes for DSA are 512, 1024, or Custom (which must
be in increments of 64 bits only).
(if you plan to use the internal/software