The Installation and Deployment Guide describes how to plan for the deployment of a public-key infrastructure (PKI) using Netscape Certificate Management System (CMS). It provides the basic information required to set up a simple default pilot, make basic deployment decisions, and install and configure CMS subsystems.

• What You Should Already Know


• What's in This Guide


• Conventions Used in This Guide


• Where to Go for Related Information

• encryption and decryption
• public keys, private keys, and symmetric keys
• digital signatures
• the role of digital certificates in a public-key infrastructure (PKI)
• certificate hierarchies
• SSL cipher suites
• the purpose of and major steps in the SSL handshake

• Chapter 1, "Introduction to Certificate Management System." Provides an overview of the Certificate Management System architecture for creating, deploying, and managing certificates.
• Chapter 2, "Default Demo Installation." Describes how to set up a simple pilot that demonstrates the basic capabilities of a Certificate Manager with an integrated Registration Manager.

• Chapter 3, "Planning Your Deployment." Reviews basic decisions you should make as you plan your initial deployment.
• Chapter 4, "Installation Worksheet." Provides a worksheet you can copy and use to collect the detailed information that you will need to provide during installation and configuration of individual subsystems.
• Chapter 5, "Installation and Configuration." Describes the procedure for installing CMS subsystems on the basis of the information collected in Chapter 4.

• Appendix A, "Migrating from Certificate Server 1.x." Describes how to use the Migration Tool that comes with Certificate Management System.
• Appendix B, "Certificate Extensions." Summarizes the standard certificate extensions defined by X.509 version 3 and the extensions defined by Netscape before this version was finalized. Recommends extensions to use with specific kinds of certificates, including both PKIX Part 1 recommendations and Netscape extensions that must be supported to maintain compatibility with early versions of Netscape products.
• Appendix C, "Certificate Download Specification." Describes the data formats used by Netscape Communicator 4.x for installing certificates.
• Appendix D, "Using SSL with Enterprise Server 3.x." Explains how to set up client certificate authentication to work with Netscape Enterprise Server 3.x.
• Appendix E, "Export Control Information." Summarizes the cryptographic operations, key lengths, and cipher suites that have received US government approval for the export version of Certificate Management System.
• Glossary. Summarizes terms used in this guide and other CMS documentation.

• Monospaced font

This typeface is used for text that is an executable part of a program or text that you type. It's also used for filenames, directory names, and URLs.

• Italic

Italic type is used for emphasis and to introduce new terms.

• Square brackets [ ]

Square brackets enclose commands that are optional.

• Angle brackets <>

Angle brackets indicate placeholders for items that vary, such as pathnames and variable names. Replace the angle brackets and their text with text that applies to your situation.

• Slash /

A slash is used to separate directories in a path. (Note that the Windows NT operating system supports both the slash and the backslash.

Caution A caution note documents a potential risk of losing data, damaging software or hardware, or otherwise disrupting system performance.

Unix Marks text that applies only to the Unix versions of Certificate Management System.

NT Marks text that applies only to the Windows NT versions of Certificate Management System.

• <server_root> is the directory where the CMS binaries are kept (specified during installation).
• <instance_id> is the ID for this instance of Certificate Management System (specified during installation).

• Managing Servers with Netscape Console provides background information on basic cryptography concepts and the role of Netscape Console.
• For the HTML version, see <server_root>/manual/en/admin/help/contents.htm.

• Netscape Certificate Management System Installation and Deployment Guide (this guide) describes how to plan for and install Certificate Management System. To access the installation and configuration information from within the CMS Installation Wizard, click any help button.
• The HTML version of this guide is located at <server_root>/manual/en/cert/dep_gide/contents.htm.
• The PDF version of this guide is located at <server_root>/manual/en/cert/pdf/cs40_dep.pdf.

• Netscape Certificate Management System Administrator's Guide provides detailed reference information on CMS administration interfaces. To access this information from the CMS window within Netscape Console, click any help button.
• The HTML version of this guide is located at <server_root>/manual/en/cert/adm_gide/contents.htm.
• The PDF version of this guide is located at <server_root>/manual/en/cert/pdf/cs40_adm.pdf.

• Netscape Certificate Management System Agent's Guide provides detailed reference information on CMS agent interfaces. To access this information from the Agent Services pages, click any help button.
• The HTML version of this guide is located in <server_root>/<instance_id>/web/agent/manual/agt_gide/contents.htm.
• The PDF version of this guide is located at <server_root>/manual/en/cert/pdf/cs40_agt.pdf.

• End-entity help (online only, not printed) provides detailed reference information on CMS end-entity interfaces. To access this information from the end-entity pages, click any help button.
• The HTML version of this guide is located at <server_root>/<instance_id>/web/ee/manual/ee_gide/contents.htm.

For a complete list of all documentation that ships with Certificate Management System, including documentation for Directory Server, see Documentation Summary, located at <server_root>/manual/index.html.