Setting up CEP Enrollment Manually
Chapter
25
Setting Up CEP Enrollment
791
•
Step 1. Set up the Directory for Publishing Certificates and CRLs
•
Step 2. Configure the Certificate Manager for Publishing Certificates and CRLs
•
Step 3. Set Up Automated Enrollment (optional)
•
Step 4. Set Up Multiple CEP Services (optional)
Step 1. Set up the Directory for Publishing
Certificates and CRLs
Chapter 19, “Setting Up LDAP Publishing contains information on setting up
Netscape Directory Server for publishing certificates and CRLs—it covers directory
schema required for publishing certificates and the attributes to which a Certificate
Manager publishes end-entity certificates and CRLs.
For the configuration directory to support publishing of certificates and CRLs, you
need to verify two things:
•
The Directory Server schema—verify that the directory schema can
accommodate router and VPN client certificates. You may need to update the
Directory Server’s schema. The reason for this is, if you plan on publishing
certificates from routers, they may need to be published with the same DN as
their certificate subject names. For example, if the certificate subject name
contains
UnstructuredAddress
or
UnstructuredName
components, you may
need to add them to the directory schema.
unstructuredAddress, 1.2.840.113549.1.9.7, string
unstructuredName, 1.2.840.113549.1.9.8, string
To modify the schema you can use the Directory Server window, which can be
launched from within Netscape Console. Alternatively, you can prepare an
LDIF file with the changes you want to make and then run the LDAP modify
command. Check the directory documentation for instructions.
•
The Directory Server port—note the port number assigned to the configuration
directory; it must be 389. If you installed Certificate Management System with
the default choices, you may skip this step; the default port assigned to the
configuration directory is 389. To find out the port number assigned to
Directory Server, check it’s configuration file (which is at
<server_root>/slapd-*/slapd.oc.conf
). Alternatively, you can also find
and change the port number from Netscape Console.
Summary of Contents for NETSCAPE MANAGEMENT SYSTEM 6.0
Page 1: ...Installation and Setup Guide Netscape Certificate Management System Version6 0 March 2002...
Page 22: ...22 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 32: ...32 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 160: ...160 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 776: ...776 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 807: ...807 Part 5 Appendix Appendix A Certificate Download Specification...
Page 808: ...808 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 830: ...830 Netscape Certificate Management System Installation and Setup Guide March 2002...
