Installing Digital Certificates For Netscape Applications


Contents

Client Private Key and Certificate Installation
Root Certificate Installation

Client Private Key and Certificate Installation

Netscape does not support the use of separate certificates for signing and encryption (otherwise known as Dual Certificate support).  This separation is widely regarded to be good practice, and should be taken advantage of  wherever possible through the use of email applications such as Outlook98 that do support dual certificate operation, together with certificates that are themselves restricted to either encryption or signing operations.

Before you can use Netscape for sending signed email and receiving encrypted e-mail, you need to install your digital certificate.  To do this:

In Netscape, select the options from the tools menu.

Under the "Advanced option select the "Manage Certificates"
Select the tab "Your certificates" and Click on "Import" option.
In the file selection window navigate to the appropriate file containing the certificate and private key. Click "Open" when ready.
Depending on whether you are using your security store for the first time will depend on the exact content of dialogue box presented. If this is the first time you will need to set the password of the certificate store, otherwise enter your master password.
In the password entry dialogue box enter the password used to encrypt the file containing the certificate and private key. Click "OK".
A message will appear confirming success

Click "OK"

A view of Your Certificates will appear, showing the newly imported key and certificate.

Highlight the new certificate and click "View".

A window similar to that shown will appear.

Click "OK" to close the window.

The Issuing Authority's Root Certificate will very likely have been installed into Netscape along with your certificate.  This is required by Netscape in order to trust certificates issued by the Issuing Authority (including your own).

You can check the Root Authority certificate is installed via the "Authorities" tab, under "Certificate Manager".

This will bring up a scrollable list of root certificates for Issuing Authorities, that have been installed into Netscape.  Locate and select the root certificate of the Issuing Authority you are interested in, and click "Edit"

Note:
If you cannot find the Issuing Authority's root certificate, it may not have been supplied with your user certificate.  In that case, you need to go to the Issuing Authority's web site and install the root certificate from there.

 

Return to table of contents


Root Certificate Installation

The Issuing Authority's Root Certificate will very likely have been installed into Netscape along with your own certificate.  This root certificate is required by Netscape in order to trust certificates issued by the Issuing Authority (including your own).  If you cannot find the Issuing Authority's root certificate in your "Signers" store, it may not have been supplied with your user certificate.  In that case, you need to go to the Issuing Authority's web site and download the certificate from there.

At the Issuing Authority's web site, there should be a clearly labelled link that enables you to download the root certificate.
To get the real root certificate for these Digital Certification Services click here and follow the simple steps below

Click on this CA Certificate link to bring up the window shown:

Ensure the "Trust this CA to identify web sites" and "Trustis this CA to identify email users" option are both selected. Click "OK" to continue.

   

Return to table of contents