Chapter 5 Tutorial: Security Configuration

Creating a user certificate

In this section you will create a user certificate that is signed by the test CA. Later, you will assign this certificate to a security profile, and assign the security profile to a listener. The listener uses the certificate to authenticate Jaguar.

Create a user certificate from Security Manager:

Highlight the CA Certificates folder.
Select File | Generate User Test Certificate.
Provide the information in the Generate User Test Certificate wizard as follows:
- Key Strength Select 512 from the drop-down list.
- Validity Period Select two months from the drop-down list. The validity period determines how long the certificate is valid. When Jaguar authenticates itself using this certificate, Netscape examines the validity period to see if it has expired.
- Key Label Enter Tutorial_cert for the name that identifies the certificate.
- SSL Server Select this box since you will use this certificate to authenticate Jaguar.
- SSL Client The same certificate can also be used by clients for authentication. Since this certificate will not be used to authenticate the client, do not select this box.
- Mark Private Key as Exportable Since you are not using this certificate on other systems, do not check this box.
Click Next. Provide your personal and site information as requested in the Certificate Request Information window. Refer to "User test certificate information" in the Jaguar CTS System Administration Guide for information on these fields.
Click Finish. Security Manager generates a user certificate that is signed by the test CA. To view the certificate, highlight the Users Certificates folder.