ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzahu_5.4.0.1/rzahurenewingcertfrominternetca.htm

96 lines
7.2 KiB
HTML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow" />
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="DC.Type" content="task" />
<meta name="DC.Title" content="Renew a certificate from an Internet CA" />
<meta name="abstract" content="If you use a well-known, Internet CA to issue the certificate, you can handle the certificate renewal in two different ways." />
<meta name="description" content="If you use a well-known, Internet CA to issue the certificate, you can handle the certificate renewal in two different ways." />
<meta name="DC.Relation" scheme="URI" content="rzahurenewanexistingcertificate.htm" />
<meta name="copyright" content="(C) Copyright IBM Corporation 2000, 2006" />
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2000, 2006" />
<meta name="DC.Format" content="XHTML" />
<meta name="DC.Identifier" content="rzahurenewingcertfrominternetca" />
<meta name="DC.Language" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
<link rel="stylesheet" type="text/css" href="./ic.css" />
<title>Renew a certificate from an Internet CA </title>
</head>
<body id="rzahurenewingcertfrominternetca"><a name="rzahurenewingcertfrominternetca"><!-- --></a>
<img src="./delta.gif" alt="Start of change" /><!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
<h1 class="topictitle1">Renew a certificate from an Internet CA </h1>
<div><p>If you use a well-known, Internet CA to issue the certificate,
you can handle the certificate renewal in two different ways.</p>
<div class="section">You can renew the certificate directly with the Internet CA and then
import the renewed certificate from the file that you receive from the signing
CA. Or, you can use DCM to create a new public-private key pair and Certificate
Signing Request (CSR) for the certificate and then send this information to
the Internet CA to obtain a new certificate. When you receive that certificate
back from the CA you can then complete the renewal process. </div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzahurenewanexistingcertificate.htm" title="The certificate renewal process that Digital Certificate Manager (DCM) uses varies based on the type of Certificate Authority (CA) that issued the certificate.">Renew an existing certificate</a></div>
</div>
</div><div class="nested1" xml:lang="en-us" id="ImportandrenewacertificateobtaineddirectlyfromanInternetCA"><a name="ImportandrenewacertificateobtaineddirectlyfromanInternetCA"><!-- --></a><h2 class="topictitle2">Import and renew a certificate obtained directly from an Internet CA</h2>
<div><div class="section">To import and renew a certificate that you obtained directly from
an Internet CA follow these steps:</div>
<ol><li class="stepexpand"><span>In the navigation frame, click <span class="uicontrol">Select a Certificate
Store</span>, then select the certificate store that holds the certificate
you want to renew.</span> <div class="note"><span class="notetitle">Note:</span> Click on the “?” for any panel to answer
any further questions you have about completing the panel.</div>
</li>
<li class="stepexpand"><span> In the navigation frame, select <span class="uicontrol">Manage Certificates</span>.</span></li>
<li class="stepexpand"><span>In the navigation frame, click <span class="uicontrol">Renew certificate</span>. </span></li>
<li class="stepexpand"><span>Select the certificate you want to renew and click <span class="uicontrol">Renew</span>.</span></li>
<li class="stepexpand"><span>Select <span class="uicontrol">VeriSign</span> or other <span class="uicontrol">Internet
Certificate Authority (CA)</span> and click <span class="uicontrol">Continue</span>.</span></li>
<li class="stepexpand"><span>Select <span class="uicontrol">No - Import the renewed signed certificate from
an existing file</span>.</span></li>
<li class="stepexpand"><span>Complete the guided task to import the certificate. </span> When
you chose to renew the certificate directly with the issuing CA, that CA returns
the renewed certificate to you in a file. Make sure that you specify the correct
absolute path for the file where the certificate is stored on the server when
you import the certificate. The file that contains the renewed certificate
can be stored in any integrated file system (IFS) directory.</li>
<li class="stepexpand"><span>Click <span class="uicontrol">OK</span> to finish the task.</span></li>
</ol>
</div>
</div>
<div class="nested1" xml:lang="en-us" id="torenewacertificatewithaninternetcabycreatinganewpublic-private"><a name="torenewacertificatewithaninternetcabycreatinganewpublic-private"><!-- --></a><h2 class="topictitle2">Renew a certificate by creating a new public-private key pair and CSR
for the certificate</h2>
<div><div class="section"><p>To renew a certificate with an Internet CA by creating a new public-private
key pair and CSR for the certificate follow these steps</p>
</div>
<ol><li class="stepexpand"><span>In the navigation frame, click <span class="uicontrol">Select a Certificate
Stor</span>e, then select the certificate store that holds the certificate
that you want to renew. </span> <div class="note"><span class="notetitle">Note:</span> Click on the “?” for any panel to
answer any further questions you have about completing the panel.</div>
</li>
<li class="stepexpand"><span>In the navigation frame, select <span class="uicontrol">Manage Certificates</span>.</span></li>
<li class="stepexpand"><span>In the navigation frame, click <span class="uicontrol">Renew certificate</span></span></li>
<li class="stepexpand"><span>Select the certificate you want to renew and click <span class="uicontrol">Renew</span>.</span></li>
<li class="stepexpand"><span>Select <span class="uicontrol">VeriSign</span> or other <span class="uicontrol">Internet
Certificate Authority (CA)</span> and click <span class="uicontrol">Continue</span>.</span></li>
<li class="stepexpand"><span>Click <span class="uicontrol">Yes - Create a new key pair for this certificate
and click Continue</span>.</span></li>
<li class="stepexpand"><span>Complete the certificate identification form. You must change the
New certificate label field, but any other fields can remain the same. Note:
Click on the “?” for any panel to answer any further questions you have about
completing the panel.</span></li>
<li class="stepexpand"><span>Click <span class="uicontrol">OK</span> to finish the task.</span></li>
</ol>
</div>
</div>
<img src="./deltaend.gif" alt="End of change" /></body>
</html>