User guide

259
ThisappendixcontainssectionsdescribingCertificatesandCertificate
Authorityandprovidesdirectionsabouthowto:
InstallDominionSXCACertificatetoaBrowserCertificate
InstallSXServerCertificateforIEBrowsers
InstallSXServerCertificateforNetscapeNavigator
InstallaThirdPartyRootCertificateInBrowsers
**GenerateaCSRforaTh
irdPa
rtyCAtosign.
**InstallThirdPartyCertificatetoSX.
**InstallClientCertificaterootintotheSX.
**InstallClientCertificateintoInternetExplorer
**InstallClientCertificateintoNetscapeNavigator
ACertificateauthority(CA)isanentitywhichissuesdigitalcertificates
forusebyoth
e
rparties.Thesecertificatescontainapublicandprivate
keypairasdescribedinstandardcryptographyreferences.Thereare
manycommercialCAsthatchargefortheirservices;however,the
DominionSXactsasafreeCAthatgeneratesitsowncertificates.CAand
certificatesarepartofhighlyav
ailablesecu
ritytechnologythatcanbe
builtintobrowsersandwebservers‐inparticularSSL.Browsersand
OperatingSystemscomewithapreinstalledlistoftrustedCertification
Authorities,knownastheTrustedRootCAstore.TheDominionSX
certificatescanbeaddedintoabrowserasTrustedCA.
In This Chapter
DefaultSXCertificateAuthoritySettings...................................................260
InstallCARootforIEBro
wsers...................................................................260
InstallDomini
onSXServerCertificateforNetscapeNavigator.............263
InstallaThirdPar
tyRootCertificate..........................................................265
ImportCertif
icatesforLDAP.......................................................................270
Appendix C
Certificates