User manual NOVELL IFOLDER 3.6 ADMINISTRATION

[. . . ] novdocx (en) 24 March 2009 AUTHORIZED DOCUMENTATION Administration Guide Novell® iFolder® 3. 6 October 2009 www. novell. com OES2: Novell iFolder 3. 6 Administration Guide novdocx (en) 24 March 2009 Legal Notices Novell, Inc. , makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. , reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. Further, Novell, Inc. , makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. , reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes. [. . . ] This long period makes sense because the replacement of a deleted CA involves an enormous administrative effort. Advanced Options are very special options. WARNING: If you change these options, iFolder cannot guarantee that the generated certificate works correctly. Clicking Advanced Options opens a dialog for setting different attributes from the X. 509 extensions. These values have rational default settings and should only be changed if you are really sure of what you are doing. Key Length (bit) Valid Period (days) Advanced Options YaST displays the current settings for confirmation. The root CA is created then appears in the overview. 82 OES2: Novell iFolder 3. 6 Administration Guide novdocx (en) 24 March 2009 7. 6. 3 Creating Self-Signed Recovery Certificates Using YaST iFolder key recovery mechanism uses the X509 certificates to manage the keys. You can either get a certificate from an external Certified Authority, for instance Verisign* or generate a self-signed certificate if deployed in a trusted environment, where a trusted user-admin relationship exists. NOTE: In certificates intended for e-mail signature, the e-mail address of the sender (the private key owner) should be contained in the certificate to enable the e-mail program to assign the correct certificate. For certificate assignment during encryption, it is necessary for the e-mail address of the recipient (the public key owner) to be included in the certificate. In the case of server and client certificates, the hostname of the server must be entered in the Common Name field. The default validity period for certificates is 365 days. This section discusses creating self-signed certificates for encryption and self-signed key certificate for key recovery using YaST. 1 Start YaST and go to Security and Users > CA Management. 2 Select the required CA and click Enter CA. 3 Enter the password for the CA if asked for. YaST displays the CA key information in the Description tab. 4 Click Certificates tab. 5 Click Add > Add Server Certificate. Installing and Configuring iFolder Services 83 novdocx (en) 24 March 2009 6 Enter the information for creating the certificates in the dialog boxes. The following table summarizes the decisions you make. CA Settings Description Common Name E-Mail Address Country Organisation, Organisational Unit, Locality, State Enter the name of the CA. You can enter several e-mail addresses that a CA user can see. Select the country where the CA is operated. Optional Values. 7 Enter a password in the second dialog. The following table summarizes the decisions you make. CA Settings Descriptions Password Key Length (bit) Specify a password with a minimum length of five characters. To confirm, re-enter it in the next field. [. . . ] You resolve the dependencies and apply the Software updates available on your machine. Caveats for Implementing iFolder 3. 6 Services 173 novdocx (en) 24 March 2009 Follow the steps given below to apply the Mono patch: 1 Install iFolder with OES 2. 2 During OES 2 configuration, select Customer Center Configuration. 3 Complete the Novell Customer Center System Registration procedure. 4 Continue with the remaining steps for configuration. [. . . ]