Netscape MANAGEMENT SYSTEM 6.2 - ADMINISTRATOR Administrator's Manual page 98

Installing a Certificate Manager
SSL Server Certificate. Select the "Sign SSL certificate with my CA signing
19.
certificate" option. This option enables the wizard to generate an SSL Server
Certificate signed with the local CA signing certificate, the root Certificate
Manager's CA signing certificate you just created.
Click Next to continue.
Key-Pair Information for SSL Server Certificate.
20.
See "Signing Key Type and Length" on page 91 for more information.
Click Next to continue.
Message Digest Algorithm. Select the algorithm to use for computing the
21.
certificate signature. The choices are: SHA-1, MD2, or MD5.
Click Next to continue.
Subject Name for SSL Server Certificate. Type the values for the subject DN
22.
components; these values identify the root CA's SSL server certificate. The CN
must be the fully-qualified host name of the machine on which you're
installing the Certificate Manager.
Click Next to continue.
Validity Period for SSL Server Certificate. Select the validity period for the
23.
SSL server certificate. The validity period determines how soon you will have
to renew the certificate.
Click Next to continue.
Certificate Extensions for SSL Server Certificate. Select the required
24.
extensions. The default settings should work for most deployments. If
necessary, you can add an additional extension by pasting its base-64 encoding
in the space provided on this screen (see Step 17).
Click Next to continue.
98 Netscape Certificate Management System Administrator's Guide • June 2003
Token. Enter either
internal
token) or the name of an external token. If you have not previously
initialized the token's password, you must do so in this screen. See
"Tokens," on page 93 for more information.
Key Type. Choose RSA.
Key Length. Available key sizes for RSA are 512, 768, 1024, 2048, 4096, or
Custom. Available key sizes for DSA are 512, 1024, or Custom (which must
be in increments of 64 bits only).
(if you plan to use the internal/software