World Wide Web security URLmerchant systemChat community system server navigator TCP/IP HTML Publishing PersonalManaging Servers withInter wwNetscape ConsoleProxy SSL Version 4.2 Mozilla IStore Publishing Internet secure sockets layer mail encryption HTMLhttp://www comp.syselectronic commerce JavaScript directory server news certificate Proxy Netscape Communications Corporation (“Netscape”) and its licensors retain all ownership rights to the software programs offered by Netscape (referred to herein as “Software”) and related documentation. Use of the Software and related documentation is governed by the license agreement accompanying the Software and applicable copyright law. Your right to copy this documentation is limited by copyright law. Making unauthorized copies, adaptations, or compilation works is prohibited and constitutes a punishable violation of the law. Netscape may revise this documentation from time to time without notice. THIS DOCUMENTATION IS PROVIDED “AS IS” WITHOUT WARRANTY OF ANY KIND. IN NO EVENT SHALL NETSCAPE BE LIABLE FOR ANY LOSS OF PROFITS, LOSS OF BUSINESS, LOSS OF USE OR DATA, INTERRUPTION OF BUSINESS, OR FOR INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES OF ANY KIND, ARISING FROM ANY ERROR IN THIS DOCUMENTATION. The Software and documentation are copyright ©2000 Netscape Communications Corporation. All rights reserved. Portions of the Software copyright © 1994-1995 Sun Microsystems, Inc. All rights reserved. Portions of the Software copyright © 1995 PEER Networks, Inc. All rights reserved. The Software contains the Taligent International Classes from Taligent, Inc. and IBM Corp. Netscape, Netscape Navigator, Netscape Certificate Server, Netscape DevEdge, Netscape FastTrack Server, Netscape ONE, SuiteSpot and the Netscape N and Ship's Wheel logos are registered trademarks of Netscape Communications Corporation in the United States and other countries. Other Netscape logos, product names, and service names are also trademarks of Netscape Communications Corporation, which may be registered in other countries. Other product and brand names are trademarks of their respective owners. The downloading, export or reexport of Netscape software or any underlying information or technology must be in full compliance with all United States and other applicable laws and regulations. Any provision of Netscape software or documentation to the U.S. Government is with restricted rights as described in the license agreement accompanying Netscape software. The Team: Engineering:Atul Bhandari, Andy Hakim, Miodrag Kekic, Terence Kwan, Peter Lee, Adam Prishtina, Chih-Ming Shih, Rob Weltman, Tony Xue Marketing:Fletcher Jones Publications:Gina Cariaga, Alan Morgenegg Quality Assurance:Sudesh Chandra, Jeesun Cho, Jun Tong Version 4.2 Part Number 151-06256-00 ©2000 Netscape Communications Corporation. All Rights Reserved Netscape Communications Corporation, 501 East Middlefield Road, Mountain View, CA 94043 Contents What’s in This Guide .............................................................................................9 Conventions Used in This Guide .....................................................................9 Viewing This Book Online .............................................................................10 Part 1 Overview of Netscape Console Chapter 1 Introducing Netscape Console ........................................13 The Directory Server ...........................................................................................13 The Administration Server ...................................................................................16 Netscape Console ................................................................................................17 Chapter 2 The Netscape Server Products Setup Program .........................................................................................19 It’s More Than Just a Setup Program ..................................................................19 Installing a New Server ...................................................................................20 Installation Modes ...........................................................................................20 Silent Installation .................................................................................................22 Installing Netscape Console as a Stand-Alone Application ...............................22 Part 2 Netscape Server Basics Chapter 3 Using Netscape Console ....................................................25 Logging In to Netscape Console .........................................................................26 The Navigation Tree ............................................................................................26 Opening a Netscape Server ............................................................................28 The Administration Domain ...........................................................................28 Adding a Pre-4.0 Server to the Tree ...............................................................31 Migrating a Pre-4.0 Server to a 4.0 Server .....................................................33 Cloning a Server ..............................................................................................34 Creating a New Server Instance .....................................................................35 Removing a Server Instance ...........................................................................35 Uninstalling a Netscape Server .......................................................................36 Contents iii Merging Configuration Data from Two Directory Servers ................................ 36 Customizing Your View of Netscape Console .................................................. 38 Display Preferences ........................................................................................ 40 Setting Display Fonts ...................................................................................... 41 Administration Express ....................................................................................... 42 Chapter 4 User and Group Administration ..................................... 45 Interacting with the Directory Server ................................................................. 45 Using Distinguished Names ........................................................................... 46 Locating an Existing User or Group in the User Directory .......................... 46 Choosing a Different Search Directory .......................................................... 48 End-User Access to the User Directory ......................................................... 48 Creating New Directory Entries .......................................................................... 50 Organizational Units ....................................................................................... 50 Groups ............................................................................................................ 52 Users ................................................................................................................ 58 Modifying Existing Directory Entries ................................................................. 61 Tracking User Licenses ....................................................................................... 62 Chapter 5 Using SSL .............................................................................. 63 The SSL Protocol ................................................................................................. 64 Using External Encryption Devices ............................................................... 64 SSL Ciphers ..................................................................................................... 66 Choosing SSL Ciphers .................................................................................... 66 Setting up SSL Encryption ................................................................................... 67 SSL Options ..................................................................................................... 68 Obtaining and Installing a Certificate ................................................................ 69 SSL Certificates ................................................................................................ 69 Generating a Server Certificate Request ........................................................ 70 Sending the Server Certificate Request .......................................................... 74 Obtaining a Server Certificate Chain ............................................................. 76 Installing the Certificate ................................................................................. 76 Activating SSL ...................................................................................................... 80 Managing Server Certificates .............................................................................. 82 Changing the CA Trust Option ...................................................................... 82 iv Managing Servers with Netscape Console Changing the Trust Database Password ........................................................ 83 Managing Certificate Lists ............................................................................... 83 Using Client Certificates ...................................................................................... 85 How Client Certificates Work ........................................................................85