When users access a server that provides a Secure Sockets Layer (SSL) connection, the server presents a certificate to the user's client software as proof of its identity. The client software must then validate the server's certificate before the server can establish the session. To validate the server certificate, the client software must have access to a locally stored copy of the certificate for the Certificate Authority (CA) that issued the server certificate. If the server presents a certificate from a public Internet CA, the user's browser or other client software must already have a copy of the CA certificate. If, as in this scenario, the server presents a certificate from a private Local CA, each user must use Digital Certificate Manager (DCM) to install a copy of the Local CA certificate.
Each user (Clients B, C, and D) must complete these steps to obtain a copy of a Local CA certificate:
Now that users can access the human resources Web server in SSL mode, these users must be able to present an appropriate certificate to authenticate to the server. Consequently, they must obtain a user certificate from the Local CA.