62 lines
4.2 KiB
HTML
62 lines
4.2 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
|
<!DOCTYPE html
|
||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html lang="en-us" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow" />
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<meta name="DC.Type" content="concept" />
|
||
|
|
<meta name="DC.Title" content="Certificate renewal" />
|
||
|
|
<meta name="abstract" content="The certificate renewal process that Digital Certificate Manager (DCM) uses varies based on the type of Certificate Authority (CA) that issued the certificate." />
|
||
|
|
<meta name="description" content="The certificate renewal process that Digital Certificate Manager (DCM) uses varies based on the type of Certificate Authority (CA) that issued the certificate." />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzahurzahu4abunderstanddc.htm" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2000, 2006" />
|
||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2000, 2006" />
|
||
|
|
<meta name="DC.Format" content="XHTML" />
|
||
|
|
<meta name="DC.Identifier" content="cert_renewal" />
|
||
|
|
<meta name="DC.Language" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
|
<title>Certificate renewal</title>
|
||
|
|
</head>
|
||
|
|
<body id="cert_renewal"><a name="cert_renewal"><!-- --></a>
|
||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<h1 class="topictitle1">Certificate renewal</h1>
|
||
|
|
<div><p>The certificate renewal process that Digital Certificate Manager
|
||
|
|
(DCM) uses varies based on the type of Certificate Authority (CA) that issued
|
||
|
|
the certificate. </p>
|
||
|
|
<p>If you use the Local CA to sign the renewed certificate,
|
||
|
|
DCM uses the information that you provide to create a new certificate in the
|
||
|
|
current certificate store and retains the previous certificate. </p>
|
||
|
|
<p>If you use a well-known, Internet CA to issue the certificate, you can
|
||
|
|
handle the certificate renewal in one of two ways: to import the renewed certificate
|
||
|
|
from a file you receive from the signing CA or to have DCM create a new public-private
|
||
|
|
key pair for the certificate. DCM provides the first option in case you prefer
|
||
|
|
to renew the certificate directly with the CA that issued it. </p>
|
||
|
|
<p>If you choose to create a new key pair, DCM handles the renewal in the
|
||
|
|
same way that it handled the creation of the certificate. DCM creates a new
|
||
|
|
public-private key pair for the renewed certificate and generates a Certificate
|
||
|
|
Signing Request (CSR) which consists of the public key and other information
|
||
|
|
that you specify for the new certificate. You can use the CSR to request a
|
||
|
|
new certificate from VeriSign or any other public CA. Once you receive the
|
||
|
|
signed certificate from the CA, you use DCM to import the certificate into
|
||
|
|
the appropriate certificate store. The certificate store then contains both
|
||
|
|
copies of the certificate, the original and the newly issued renewed certificate. </p>
|
||
|
|
<p>If you choose not to have DCM generate a new key pair, DCM guides you through
|
||
|
|
the process of importing the renewed, signed certificate into the certificate
|
||
|
|
store from an existing file that you received from the CA. The imported, renewed
|
||
|
|
certificate then replaces the previous certificate. </p>
|
||
|
|
</div>
|
||
|
|
<div>
|
||
|
|
<div class="familylinks">
|
||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzahurzahu4abunderstanddc.htm" title="View this information to better understand what digital certificates are and how they work. Learn about the different types of certificates and how you can use them as part of your security policy.">DCM concepts</a></div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</body>
|
||
|
|
</html>
|