Process Flow. NetIQ 4.2

3

Under Next CRL Issuance, click

Issue Now

.

4

Click

OK

.

5

Restart the Identity Server.

Process Flow

You can install and distribute certificates to the Access Manager Appliance components and configure how the components use certificates. This includes central storage, distribution, and

expired certificate renewal. Figure 10-1

illustrates the primary administrative actions for certificate management in Access Manager Appliance:

Figure 10-1

Certificate Management

Certificate

Authority

2

Certificate

Access Gateway

4

1

3

Administration

Console

Identity Server

Administrator

4

1. Generate a certificate signing request (CSR). See

“Generating a Certificate Signing Request” on page 804 .

2. Send the CSR to the external certificate authority (CA) for signing.

A CA is a third-party or network authority that issues and manages security credentials and public keys for message encryption. The CA’s certificate is held in the configuration store of the computers that trust the CA.

3. Import the signed certificate and CA chain into the configuration store. See “Importing Public Key

Certificates (Trusted Roots)” on page 815 .

4. Assign certificates to devices. See “Assigning Certificates to Access Manager Appliance” on page 813 .

If you are unfamiliar with public key cryptography concepts, see “Public Key Cryptography Basics” in the

Novell Certificate Server 3.1.1 Guide

.

798

Understanding Access Manager Certificates