Configuring Key Archival and Recovery Process
Chapter
22
Setting Up Key Archival and Recovery
737
f.
Paste the certificate as the value of the
kraTransportCert
variable.
Paste the certificate in front of the
=
sign, remove any line breaks, enclose
the certificate within double-quotation marks (
“”
), and end the string with
a semicolon (
;
). When deleting line breaks, be sure not to delete any of the
characters in the encoded blob.
An example is shown below:
var kraTransportCert =
”MIICDjCCAXegAwIBAgICAfMwDQYJKoZIhvcNAQEEBQAwdzELMAkGA1UEBhMCVVMxLDA
qBgNVBAoTI05ldHNjYXBlIENvbW11bmljYXRpb25zIENvcnBvcmF0aW9uMREwDwYDVQQ
LEwhIYXJkY29yZTEnMCUGA1UEAxMeSGFyZGNvcmUgQ2VydGlmaWNhdGUgU2VydmVyIEl
JMB4XDTk4MTExOTIzNDIxOVoXDTk5MDUxODIzNDIxOVowLjELMAkGA1UEBhMCVVMxETA
PBgNVBAoTCG5ldHNjYXBlMQwwCgYDVQQDEwNLUmEwXDANBgkqhkiG9w0BAQEFAANLADB
IAkEArrbDiYUI5SCdlCKKa0bEBn1m83kX6bdhytRYNkdHB95Bp85SR”;
g.
Pass the
kraTransportCert
variable to the JavaScript method.
Replace
null
(the fourth line in the method) with
kraTransportCert
.
h.
Specify the key algorithm and key type (see “
generateCRMFRequest()
” in
Javascript API for Client Certificate Management).
Below is an example that shows how the updated
generateCRMFRequest()
method would look:
// generate keys for PSM.
if (navigator.appName == "Netscape" && (navMajorVersion() > 3) &&
typeof(crypto.version) != "undefined") {
certNickname.value = subject.value;
crmfObject = crypto.generateCRMFRequest(subject.value,
"regToken",
"authenticator",
kraTransportCert,
"setCRMFRequest();",
512, null, "rsa-ex",
1024, null, "rsa-sign");
}
The method triggers the client to generate two RSA key pairs—one key of
length 512 for encrypting data and another key of length 1024 for signing
data.
i.
Save your changes.
Step D. Configure Key Archival Policies
This step is optional.
Summary of Contents for NETSCAPE MANAGEMENT SYSTEM 6.0
Page 1: ...Installation and Setup Guide Netscape Certificate Management System Version6 0 March 2002...
Page 22: ...22 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 32: ...32 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 160: ...160 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 776: ...776 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 807: ...807 Part 5 Appendix Appendix A Certificate Download Specification...
Page 808: ...808 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 830: ...830 Netscape Certificate Management System Installation and Setup Guide March 2002...
