Netscape MANAGEMENT SYSTEM 6.2 - ADMINISTRATOR Administrator's Manual page 310

Managing the Certificate Database
• Online Certificate Status Manager Signing Certificate—choose this option if
you want to install a signing certificate for the Online Certificate Status
Manager installed in the currently selected CMS instance.
• SSL Server Certificate—choose this option if you want to install an SSL server
certificate for the CMS managers installed in the currently selected CMS
instance.
• Trusted CA Certificate Chain—choose this option if you want to install a
trusted CA certificate chain; the CA certificate will be included in the chain.
• Cross-Signed Certificate—choose this option if you want to install a
cross-signed certificate.
• Untrusted CA Certificate Chain—choose this option if you want to install an
untrusted CA certificate chain.
Step 3. Specify the Location of the Certificate
Locate the certificate or certificate chain you want to install.
You can keep the certificate or certificate chain in a text file or copy it to the text
area on the wizard screen. Here is some information that will help you decide on
the location.
• Keeping the certificate or certificate chain in a text file—the wizard can import
a certificate or certificate chain from a text file in text as well as binary formats;
see "Data Formats for Installing Certificates and Certificate Chains" on
page 308. If you have copied the certificate or certificate chain to a text file, you
will be required to provide the wizard with the absolute path to that file. The
file must be located in the host system the wizard is running. If the file is
located elsewhere, exit from the wizard, copy the file to the local disk, and
restart the wizard.
• Copying the certificate or certificate chain to the text area on the wizard
screen—you can paste the certificate or certificate chain into the text area
provided by the wizard. This is a text input field, so you can paste the
certificate or certificate chain in text format only. For example, if you are
installing a certificate, it base-64 encoded certificate blob should look similar to
this:
-----BEGIN CERTIFICATE-----
MIICKzCCAZSgAwIBAgIBAzANgkqkiG9w0BAQQFADA3MQswCQYDVQQGEwJVUzERMA
8GA1UEChMITmV0c2Nh
cGUxFTATBgNVBAsTDFN1cHJpeWEncyBDQTAeFw05NzEwMTgwMTM2MjVaFw05OTEw
MTgwMTM2MjVaMEgxCz
AJBgNVBAYTAlVTMREwDwYDVQQKEwhOZXRzY2FwZTENMAsGA1UECxMEUHawczEXMB
310 Netscape Certificate Management System Administrator's Guide • June 2003