5.1 Upgrading the Version of Novell Certificate Server

5.1.1 Server Certificate Object

An eDirectory™ or NDS™ object that contains the public key, private key, certificate, and certificate chain. It is also known as a Key Material object (KMO), and the eDirectory or NDS schema name is NDSPKI:Key Material. The private key is stored in the Server Certificate object in encrypted form. A server can own many Server Certificate objects. Any cryptography-enabled applications running on a particular server that require keying material for their operation can be configured to use any one of the Server Certificate objects that the server owns.

All Server Certificate objects must be owned by a server. Ownership of the Server Certificate object cannot be changed or transferred.

Each server links to the appropriate Server Certificate objects so that the server’s certificates can be used by cryptography-enabled applications.

5.1.2 Novell Certificate Server Components

The version of all components of the Novell Certificate Server should match. The components are:

  • Pki.nlm

  • ConsoleOne™ snap-in

  • Novell Certificate Console

Each of these components should have a version of at least 2.0.

These files are contained in the latest Novell Certificate Server product available from the Novell Download Web site.