Certificate Setup Wizard456 Netscape Certificate Management System Installation and Setup Guide • October 2001Certificate Setup WizardCertificate Management System provides a wizard, called the Certificate SetupWizard, which automates the process of requesting and installing the certificatesrequired by the CMS managers—Certificate Manager, Registration Manager, DataRecovery Manager, and Online Certificate Status Manager—installed in thecurrently selected CMS instance. For details about these certificates, see “Keys andCertificates for the Main Subsystems” on page 436.The Certificate Setup Wizard is integrated into the CMS window, enabling you toaccomplish the following tasks:• Renew certificates of the CMS managers installed in a CMS instance; renewing acertificate means getting a new certificate with the same subject name andpublic and private key material as that of the existing certificate, but with anextended validity period.• Request and install new certificates for the CMS managers installed in a CMSinstance; reissuing or requesting a new certificate means getting a certificatebased on a new public and private key pair.• Install CA certificates in the certificate or trust database of a CMS instance.• Install CA certificate chains in the certificate database of a CMS instance.When you start the wizard, which you do by clicking the Certificate Setup Wizardbutton in the Encryption tab of the CMS window (see the figure on page 454), youare asked to specify whether you want to request or install a certificate. The wizardpresents you with the screens appropriate to your choice and walks you throughthe entire process.For installing certificates, except for cases when the certificate is self-signed by theCA, you will need to run the wizard twice: once, to request the certificate and onceto install the certificate. The reason for this is, if you submit the certificate request toa non-local CA, you will have to wait for the certificate until it is delivered to you.The following sections explain the process of requesting and installing a certificateby using the Certificate Setup Wizard:• Using the Wizard to Request a Certificate• Using the Wizard to Install a Certificate or Certificate ChainFor instructions on getting new certificates, see “Getting New Certificates for theSubsystems” on page 485. For instructions on renewing existing certificates, see“Renewing Certificates for the Subsystems” on page 494.
