Configuring Key Archival and Recovery Process230 Netscape Certificate Management System Administrator’s Guide • February 200331. Single Sign-on Summary. Check the summary and select whether to retain ordelete the password.conf file.The single signon password simplifies the way you subsequently sign on toCMS by storing the passwords for the internal database, tokens, and so on.Each time you log on, you’re only required to enter this single password. (Fordetails, see “System Passwords” on page 252.)Click Next to continue.32. Configuration Status. This screen should indicate that your configuration hasbeen successful.Click Done to exit the Installation Wizard.33. You now need to create the first agent user for the Data Recovery Manager. See“Agent Certificates,” on page 337 for details.Configuring Key Archival and Recovery ProcessBy default, the Data Recovery Manager is not configured to archive or recoverend-entity’s encryption private keys. This section explains how to set up keyarchival and recovery processes.• Step 1. Set Up the Key Archival Process• Step 2. Set Up the Key Recovery Process• Step 3. Test Your Key Archival and Recovery SetupStep 1. Set Up the Key Archival ProcessBefore proceeding with this section, you should have read “Key Archival Process”on page 201. In particular, you should be familiar with how the key archivalprocess works. If you are not, see “How Key Archival Works” on page 203.To set up the key archival process, follow these steps:• Step A. Deploy Clients That Can Generate Dual Key Pairs• Step B. Connect the Enrollment Authority and the Data Recovery Manager• Step C. Customize the Certificate Enrollment Form• Step D. Configure Key Archival Policies
