Configuring Key Archival and Recovery ProcessChapter 22 Setting Up Key Archival and Recovery 737f. Paste the certificate as the value of the kraTransportCert variable.Paste the certificate in front of the = sign, remove any line breaks, enclosethe certificate within double-quotation marks (“”), and end the string witha semicolon (;). When deleting line breaks, be sure not to delete any of thecharacters in the encoded blob.An example is shown below:var kraTransportCert =”MIICDjCCAXegAwIBAgICAfMwDQYJKoZIhvcNAQEEBQAwdzELMAkGA1UEBhMCVVMxLDAqBgNVBAoTI05ldHNjYXBlIENvbW11bmljYXRpb25zIENvcnBvcmF0aW9uMREwDwYDVQQLEwhIYXJkY29yZTEnMCUGA1UEAxMeSGFyZGNvcmUgQ2VydGlmaWNhdGUgU2VydmVyIElJMB4XDTk4MTExOTIzNDIxOVoXDTk5MDUxODIzNDIxOVowLjELMAkGA1UEBhMCVVMxETAPBgNVBAoTCG5ldHNjYXBlMQwwCgYDVQQDEwNLUmEwXDANBgkqhkiG9w0BAQEFAANLADBIAkEArrbDiYUI5SCdlCKKa0bEBn1m83kX6bdhytRYNkdHB95Bp85SR”;g. Pass the kraTransportCert variable to the JavaScript method.Replace null (the fourth line in the method) with kraTransportCert.h. Specify the key algorithm and key type (see “generateCRMFRequest()” inJavascript API for Client Certificate Management).Below is an example that shows how the updatedgenerateCRMFRequest() method would look:// generate keys for PSM.if (navigator.appName == "Netscape" && (navMajorVersion() > 3) &&typeof(crypto.version) != "undefined") {certNickname.value = subject.value;crmfObject = crypto.generateCRMFRequest(subject.value,"regToken","authenticator",kraTransportCert,"setCRMFRequest();",512, null, "rsa-ex",1024, null, "rsa-sign");}The method triggers the client to generate two RSA key pairs—one key oflength 512 for encrypting data and another key of length 1024 for signingdata.i. Save your changes.Step D. Configure Key Archival PoliciesThis step is optional.
