User guide

Chapter 8: Setting and Use of the Certificate/Key Management Environment Using the SMEE Command
8-10
Registering the Certificate and CRL
Register the obtained certificate and CRL in the certificate management environment.
After registering the certificate and CRL, make a backup of the certificate/key management environment.
For details on how to make a backup, see the description of making a backup of data related to each
service in Operator's Guide or "Resource Registration", "1.Search for Existing Resources (Private Key
and Certificates)."
Registering the Certificate of the CA
Register the acquired certificate of the CA in the certificate management environment.
Register all certificates issued by the CA that is used for the operation (site certificates and client
certificates). Use the cmsetenv command to register CA certificates issued by VeriSign Inc.
Register the certificates starting with the root certificate.
Example
The example below assumes the CA certificate is contained in d:\sslenv\ca-cert.der file.
cmentcert d:\sslenv\ca-cert.der -ed d:\sslenv\sslcert -ca -nn CACert
The example below assumes the CA certificate is contained in /export/home/ca-cert.der file.
# cmentcert /export/home/ca-cert.der -ed /export/home/sslcert -ca -nn CACert
Note
It is necessary to register the same issue office certificate with the CORBA Service by all the CORBA
servers and CORBA clients that use SSL:
Registering the Site Certificate
Register the site certificate issued by a CA in the certificate management environment.
Example
The example below assumes the site certificate is contained in d:\sslenv\my_site_cert.der file.
cmentcert d:\sslenv\my_site_cert.der -ed d:\sslenv\sslcert -own -nn MySiteCert