Requesting and Installing Other Server Certificates94 Netscape Enterprise Server Administrator’s Guide • April 2002 (Draft)Some commercial CAs offer certificates with greater detail and veracity toorganizations or individuals who provide more thorough identification. Forexample, you might be able to purchase a certificate stating that the CA has notonly verified that you are the rightful administrator of the www.example.comcomputer, but that you are a company that has been in business for three years,and have no outstanding customer litigation.Requesting Other Server CertificatesTo request a certificate, perform the following steps:1. Access either the Enterprise Server Administration Server or the ServerManager and choose the Security tab.For the Server Manager you must first select the server instance from thedrop-down list.2. Click the Request a Certificate link.3. Select if this is a new certificate or a certificate renewal.Many certificates expire after a set period of time, such as six months or a year.Some CAs will automatically send you a renewal.4. Perform the following steps to specify how you want to submit the request forthe certificate:❍ If the CA expects to receive the request in an email message, check CAEmail and enter the email address of the CA. For a list of CAs, click List ofavailable certificate authorities.❍ If you are requesting the certificate from an internal CA that is usingNetscape Certificate Server, click CA URL and enter the URL for theCertificate Server. This URL should point to the certificate server’sprogram that handles certificate requests. A sample URL might be:https://CA.example.com:444/cms.5. Select the cryptographic module for the key-pair file you want to use whenrequesting the certificate from the drop-down list.6. Select the cryptographic key size to be used with the certificate from thedrop-down list. Choose a key size of 1024 or 2048 bits.This key is used in RSA operations. Larger keys can provide improvedsecurity, but the computation time associated with this key is proportional tothe square of the modulus. For example, a key size of 2048 bits takes four timeslonger to process than a 1024-bit key size.
