CSR Support

 

Netscape Enterprise/Fast Track

Creating a Key Pair

  1. Open a DOS window. At the command line, type cd\bin\admin\admin\bin.
  1. Type sec-key at the command prompt. A Netscape key-pair file generation window appears.
  1. Enter an alias name for the key-pair file. The alias name should not contain white space.
  1. Type OK. Follow the instructions for randomness and then click OK.
  1. Enter a password.

Warning: If you lose the password, you must purchase another certificate.

  1. Return to the Keys and Certificates menu in the Netscape Suitespot Server administration page.

Creating a Certificate Signing Request

  1. Start the Netscape administration page.
  1. Login as the administrator.
  1. Click on Keys and Certificates on the administration main menu.
  1. Select Request a Certificate on the navigation window.
  1. Click on New Certificate in the Request a Server Certificate window.
  1. Select CA URL (enter anything in the box).
  1. Select the alias that you generated in the key-pair file.
  1. Type in the Distinguished Name Field information. This information will appear in your server certificate. Any variations can lead to delays in the verification process. When creating a CSR you must follow these conventions.

The following characters can not be accepted: < > ~ ! @ # $ % ^ * / \ ( ) ?.  

 

Distinguished Name Field

Explanation

Example

Requester Name

Your Name

John Doe

Telephone Number

Your Telephone Number

(xxx) xxx-xxxx

Common Name (Server Host Name)

The fully qualified domain name for your web server. You will get a certificate name check warning if this is not an exact match.

If you intend to secure the URL https://secure.yourURL.com, then your CSR's Server Hostname must be secure.yourURL.com

Server Admin.'s email address

Your email address

abc@yourURL.com

Organization Name

The exact legal name of your organization. Do not abbreviate

IPS S.L.

Organizational Unit

Optional for additional organization information

Marketing

City or Locality

The city where your organization is located.

Atlanta

State or Province Name

The state or province where your organization is located. Can not be abbreviated.

Georgia

Country Name

The two-letter ISO abbreviation for your country

US = United States

 

 

  1. Click OK when finished.

The system will generate a CSR which will start with

"-----Begin Certificate Request-----" and it will end with

"-----End Certificate Request-----".

  1. Save this CSR into a text file. If you are using Windows or NT, you can use Notepad to cut and paste the CSR and then save it.
  1. Submit your CSR to IPSCA.

 


 CSR installation

 

Installing a Server Digital Certificate on Netscape Enterprise Servers
This document introduces installing a Server Digital Certificate, and answers questions you might have.

• Installing a Server Digital Certificate using Netscape Enterprise Server 4.0 onwards

• Installing a Server Digital Certificate using Netscape Enterprise Server 3.5 onwards

• Configure your Admin Server to enable SSL
 

 
Installing a Server Digital Certificate using Netscape Enterprise Server 4.0 SP4

Stage 1: Download the Intermediate CA Certificate from here ( note this is also referred to as a Server Cert. Chain )

Step 1 Wait until the Server Digital Certificate has been emailed to you.

Step 2 Save the Intermediate CA Certificate and Server Subscriber Certificates (from the email) as text files.

Step 3 Browse to Netscape Enterprise Server Web pages.

Step 4 Select the " Manage " button. This highlights the Enterprise Server 4.0 SP 4.

Step 5 Select " Security " tag.

Step 6 Select " Install Certificate " button.

Step 7 Select " Server Digital Certificate Chain " radio button.

Step 8 Enter Key pair password.

Step 9 Select Message Text radio button.

Step 10 Paste the "Intermediate Certificate " into text box, and select the OK button.

Step 11 A box showing the certificate information is now displayed.

Stage 2: Server Subscriber Certificate

Step 1 Select " Install Certificate " button.

Step 2 Select "Security" tag.

Step 3 Select " Install Certificate " button.

Step 4 Select " This Server" radio button.

Step 5 Enter Key pair password.

Step 6 Select Message Text radio button.

Step 7 Paste the Server Subscriber Certificate into the text box, and select the OK button.

Step 8 A box showing the certificate information is now displayed.

Step 9 Select the " Add Server Digital Certificate button ".

Step 10 A dialog box is now displayed saying the Certificate has installed OK.

Step 11 Select Preferences tag, followed by the " On/Off " button. Turn the server Off and On.

Step 12 Select " Encryption on/off " button.

Step 13 Select " Encryption On " Radio button. ( If encryption has not already been turned on.).

Step 14 Select " OK " button.

return to the top

Installing a Server Digital Certificate using Netscape Enterprise Server 3.5 onwards

Installing the Customer's Server Digital Certificate

When ipsCA has completed authenticating your enrolment, we will send you instructions for picking up your Digital Certificate.

To install a Digital Certificate and associate it with an alias:

  1. In the Server Administration page, choose Keys & Certificates|Install Certificate.
  2. Check the type of certificate you are installing: Choose This Server
  3. Paste the e-mail text in the field called Message text. Be sure to include the headers "Begin Certificate" and "End Certificate." Make sure you check the corresponding radio button for either the file or the text.
  4. From the drop-down list, select the alias you used when you requested the certificate. If you choose the incorrect alias, the certificate won't install.
  5. Click OK. Another form appears asking if you want to add the certificate. Click the Add button. The certificate is stored in the directory <server_root>/alias. The filename will be <alias>-cert.db. For example, if your alias is mail, the file will be mail-cert.db.

Installing the Intermediate Root CA

Here are the instructions on how to install the Intermediate Root CA on a Netscape Enterprise web server
  • Download the Intermediate Certificate from here.

  • Enter the administrator console/interface.

  • Next select Key & Certificates under General Administration.

  • From here select install certificate.

  • You will be presented with a series of options.

  • Select the radio button labeled Certificate for :server certificate chain.

  • You will need to either copy and paste the text of the Intermediate
    Root CA or you can place the text into a file and read the file into the server.

 

  return to the top

Configure your Admin Server to enable SSL

Activating SSL encryption

After you have generated a key-pair file and installed your certificate, you can activate SSL for your administration server. See the documentation for individual servers if you want to enable encryption in them.

  1. In the Server Manager, choose Admin Preferences|Encryption On/Off. The Encryption On/Off form appears.
  2. Check the On radio button.
  3. In the drop-down list, choose the alias for the key-pair file and certificate file that you want to use. You must know the password for the key-pair file referenced by this alias--it's the password you must enter before starting or stopping a server that uses SSL encryption.
  4. Set any security preferences you want.
  5. Stop your server, then restart it, from the command-line or NT control panel. You'll be prompted to enter the password for the key-pair alias you used.
    URLs to an SSL-enabled administration server are constructed using https instead of simply http. URLs that point to documents on an SSL-enabled server have this format:
    https://<servername.[domain.[dom]]:[port#]>
    For example, https://admin.mozilla.com:443. If you use the default secure http port number (443), you don't have to use the port number in the URL.

Setting security (SSL) preferences

You can set preferences for using SSL encryption on the administration server.

  1. Go to the Server Manager and choose Server Preferences|Encryption Preferences.
  2. Check the SSL versions you want your server to communicate with. The latest and most secure version is SSL version 3, but many older clients use only SSL version 2. You will probably want to enable your server to use both versions.
  3. Check the ciphers you want your server to use. The ciphers are listed for each version of SSL. A cipher is the algorithm used in encryption. Some ciphers are more secure, or stronger, than others. Generally speaking, the more bits a cipher uses during encryption, the harder it is to decrypt the data. Ciphers are described after this list.
  4. Click OK. Make sure you restart your server.
    When a navigator initiates an SSL connection with a server, it lets the server know what ciphers it prefers to use to encrypt information. In any two-way encryption process, both parties must use the same ciphers. Since there are a number of ciphers available, you should consider enabling all ciphers.
  5. You can choose ciphers from both the SSL 2 and SSL 3 protocols. Unless you have a compelling reason why you don't want to use a specific cipher, you should check them all.


  return to the top

© 1996 - 2007 ipsCA, IPS Certification Authority, S.L. all Rights reserved.
Our CPS summarized or complete, CRLs, Root Certificates and legal documents
  can be found in our repository
Read our  Privacy Policy and Terms of Use