4.0 Managing Novell Certificate Server

As a system administrator, you need to perform several tasks to maintain the public key cryptography services provided through Novell Certificate Server. Use iManager to perform these tasks. This section provides a brief overview and specific information on completing each task.

Certificate Authority tasks:

Section 3.2, Creating an Organizational Certificate Authority Object
Section 4.1.2, Issuing a Public Key Certificate
Section 4.1.3, Viewing the Organizational CA's Properties
Section 4.1.4, Viewing an Organizational CA's Public Key Certificate Properties
Section 4.1.5, Viewing the CA's Self-Signed Certificate Properties
Section 4.1.6, Exporting the Organizational CA's Self-Signed Certificate
Section 4.1.7, Backing Up an Organizational CA
Section 4.1.8, Restoring an Organizational CA
Section 4.1.9, Moving the Organizational CA to a Different Server
Section 4.1.10, Validating the Organizational CA's Certificates
Section 4.1.11, Deleting the Organizational CA
Section 4.1.12, Rolling Over an Organizational CA

Server Certificate object tasks:

Section 3.4, Creating a Server Certificate Object
Section 4.2.2, Creating Default Server Certificate Objects
Section 4.2.3, Importing a Public Key Certificate into a Server Certificate Object
Section 4.2.4, Exporting a Trusted Root or Public Key Certificate
Section 4.2.5, Deleting a Server Certificate Object
Section 4.2.6, Viewing a Server Certificate Object's Properties
Section 4.2.7, Viewing a Server Certificate Object's Public Key Certificate Properties
Section 4.2.8, Viewing a Server Certificate Object's Trusted Root Certificate Properties
Section 4.2.9, Backing Up a Server Certificate Object
Section 4.2.10, Restoring a Server Certificate Object
Section 4.2.11, Server Certificate Objects and Clustering
Section 4.2.12, Validating a Server Certificate
Section 4.2.13, Revoking a Trusted Root or Self Signed Certificate
Section 4.2.14, Moving a Server Certificate Object to a Different Server
Section 4.2.15, Replacing a Server Certificate Object's Keying Material

User Certificate tasks:

Section 3.6.1, Creating a User Certificate
Section 4.3.2, Creating User Certificates in Bulk
Section 4.3.3, Importing a Public Key Certificate into a User Object (with or without the Private Key)
Section 4.3.4, Viewing a User Certificate's Properties
Section 4.3.5, Exporting a User Certificate
Section 4.3.6, Exporting a User Certificate and Private Key
Section 4.3.9, Deleting a User Certificate and Private Key
Section 4.3.7, Validating a User Certificate
Section 4.3.8, Revoking a User Certificate

X.509 Certificate Self-Provisioning:

Section 4.4.1, Overview
Section 4.4.2, User Self-Provisioning
Section 4.4.3, Server Self-Provisioning
Section 4.4.4, Certificate Self-Provisioning and the Issue Certificate Task

Using eDirectory Certificates with External Applications

Section 4.5.1, PKI Health Check Functionality
Section 4.5.2, Configuring the SAS:Service Object to Export eDirectory Certificates

Trusted Root object tasks:

Section 3.6.2, Creating a Trusted Root Container
Section 3.6.3, Creating a Trusted Root Object
Section 4.6.3, Viewing a Trusted Root Object's Properties
Section 4.6.4, Replacing a Trusted Root Certificate
Section 4.6.5, Validating a Trusted Root Object
Section 4.6.6, Revoking a Trusted Root Certificate

Certificate Revocation List (CRL) Tasks:

Section 4.7.1, Creating a CRL Container Manually
Section 4.7.2, Deleting a CRL Container
Section 4.7.3, Creating a CRL Configuration Object
Section 4.7.4, Activating a CRL Configuration Object
Section 4.7.5, Viewing and Modifying a CRL Configuration Object's Properties
Section 4.7.6, Deleting a CRL Configuration Object
Section 4.7.7, Creating a CRL Object
Section 4.7.8, Exporting a CRL File
Section 4.7.9, Replacing a CRL File
Section 4.7.10, Viewing a CRL Object's Properties
Section 4.7.11, Deleting a CRL Object

eDirectory tasks:

Section 4.8.1, Resolving Multiple Security Containers, Organizational CAs, KAP Containers, and W0 Objects
Section 4.8.2, Restoring or Re‑creating a Security Container
Section 4.8.3, Restoring or Re‑creating KAP and W0

Application tasks:

Section 4.9.1, Importing the User Certificate and Private Key into Your E-Mail Client
Section 4.9.2, Configuring Your E-Mail Client to Secure Your E-Mail
Section 4.9.3, Configuring Your Browser or E-Mail Client to Accept Certificates
Section 4.9.4, Configuring Microsoft Internet Explorer (IE) for SSL with Novell Certificates
Section 4.9.5, Configuring Microsoft IIS for Client Authentication with Novell Certificates
Section 4.9.6, Requesting a Server Certificate for Microsoft IIS