Configuring The Server To Use Separate Ssl Server Certificates - Netscape MANAGEMENT SYSTEM 6.2 - ADMINISTRATOR Administrator's Manual

Configuring the Server to Use Separate SSL
Server Certificates
You can configure a CMS instance to use separate SSL server certificates for
authenticating to Netscape Console, the Agent Services interface, and the end
entity services interface.
This configuration involves the following steps:
• Step 1. Get the Required SSL Server Certificates
• Step 2: Update the Configuration
Step 1. Get the Required SSL Server Certificates
You must first request and install the required number of SSL server certificates for
the particular CMS instance. For instructions, see "Consideration When Getting
New Certificates for the Subsystems" on page 312.
Once you have installed the certificates, you should be able to see them in the list of
SSL server certificates in the Encryption tab of the CMS window.
Step 2: Update the Configuration
After you verify that the certificates are installed, configure the server as follows:
Stop the CMS instance; see "Starting, Stopping, and Restarting CMS Instances"
1.
on page 252.
Go to this directory:
2.
In a text editor, open the
3.
Locate the
4.
servercertnickname
To change the certificate used for authenticating to the Agent Services
interface, edit the value assigned to the
the
id="agent"
To change the certificate used for authenticating to the end-entity services
interface, edit the value assigned to the
the
id="ee_nonSSL"
To change the certificate used for authenticating to the SSL-enabled
end-entity services interface, edit the value assigned to the
servercertnickname
<server_root>/cert-<instance_id>/config
file.
server.xml
parameter for the interface of your interest.
section.
section.
parameter in the
Configuring the Server's Security Preferences
servercertnickname
servercertnickname
section.
id="eeSSL"
Chapter 7 Administrative Basics
parameter in
parameter in
319