Setting Up a Certificate Manager with OCSP ServiceChapter 21 Setting Up an OCSP Responder 7053. In the form that appears, select the “Show pending requests” option and clickFind.4. In the list of pending requests, identify the request you submitted and clickDetails.5. Check the request to make sure that it has all the required attributes of a clientcertificate, including the Authority Information Access extension.6. Scroll to the bottom of the request form, and approve the request.You should see a confirmation page indicating that the certificate has beenissued. Don’t close the page until after you complete the next step.Step D. Download the Certificate to the BrowserTo download the certificate into the certificate database of Personal SecurityManager:1. In the confirmation page, scroll down to the section that says “Installing thiscertificate in a client.”2. Check the certificate details for the required extensions.3. Follow the on-screen instructions and download the certificate to yourbrowser’s certificate database.(An alternative way to download the certificate is to go to the Retrieval tab ofthe end-entity services interface, search for the certificate, and download thecertificate.)Step E. Make Sure the CA is Trusted by the BrowserWhen you downloaded the client certificate to the browser, the CertificateManager’s certificate chain also was downloaded to the browser’s certificatedatabase. Make sure that the Certificate Manager’s CA signing certificate is trustedin the browser’s certificate database; this is required for proper chaining duringcertificate validation.1. In the browser, open the Personal Security Manager interface.In Communicator version 4.7, you can open this window by selectingCommunicator from the main menu, selecting Tools, and then selectingSecurity Info.2. Select the Certificates tab and, in the left pane, click Authorities.The list of CA certificates currently stored in the browser’s certificate databaseappears.
