User manual REDHAT NETSCAPE CONSOLE 6.0 MANAGING SERVERS

[. . . ] Managing Servers with Netscape Console Netscape Console Version 6. 0 December 2001 Netscape Communications Corporation ("Netscape") and its licensors retain all ownership rights to the software programs offered by Netscape (referred to herein as "Software") and related documentation. Use of the Software and related documentation is governed by the license agreement for the Software and applicable copyright law. Your right to copy this documentation is limited by copyright law. Making unauthorized copies, adaptations or compilation works is prohibited and constitutes a punishable violation of the law. [. . . ] The permissions are applied only if they make sense for the current platform. If this key is omitted, a default value of 777 (Read, Write and Execute for all users) is assumed. Examples of Using modutil This section includes examples of using modutil to perform the following tasks: · · · · · · · · Creating Database Files Displaying Module Information Setting a Default Provider Enabling a Slot Enabling FIPS Compliance Adding a Cryptographic Module Installing a Cryptographic Module from a JAR File Changing the Password on a Token Creating Database Files You could enter something like the following example to create a set of security management database files in a directory: modutil -create -dbdir C:\databases Before running this program, the modutil tool displays a warning: WARNING: Performing this operation while a Netscape product is running could cause corruption of your security databases. If a Netscape product is currently running, you should exit the product before continuing this operation. Type 'q <enter>' to abort, or <enter> to continue: After you press Enter, the tool creates the databases and displays the following: Creating "C:\databases\key3. db". . . done. Creating "C:\databases\cert7. db". . . done. Creating "C:\databases\secmod. db". . . done. Chapter 8 Administration Server Command-Line Tools 159 modutil Displaying Module Information This example uses modutil to retrieve detailed information about a specific module: modutil -list "Netscape Internal PKCS #11 Module" -dbdir C:\databases The modutil tool displays information similar to this: Using database directory C:\databases. . . -------------------------------------------------------Name: Netscape Internal PKCS #11 ModuleLibrary file: **Internal ONLY module** Manufacturer: Netscape Communications Corp. Description: Communicator Internal Crypto Svc PKCS #11 Version 2. 0 Library Version: 4. 0 Cipher Enable Flags: None Default Mechanism Flags: RSA:DSA:RC2:RC4:DES:SHA1:MD5:MD2 Slot: Communicator Internal Cryptographic Services Version 4. 0 Manufacturer: Netscape Communications Corp Type: Software . . . Setting a Default Provider You could enter something like the following example to make a specific module the default provider for the RSA, DSA, and RC2 security mechanisms: modutil -default "Cryptographic Module" -dbdir C:\databases -mechanisms RSA:DSA:RC2 Before running this program, the modutil tool displays a warning: WARNING: Performing this operation while a Netscape product is running could cause corruption of your security databases. If a Netscape product is currently running, you should exit the product before continuing this operation. Type 'q <enter>' to abort, or <enter> to continue: After you press Enter, the tool makes the change and displays the following: Using database directory C:\databases. . . Successfully changed defaults. 160 Managing Servers with Netscape Console · December 2001 modutil Enabling a Slot You could enter something like the following example to enable a particular slot in a module: modutil -enable "Cryptographic Module" -slot "Cryptographic Reader" -dbdir C:\databases Before running this program, the modutil tool displays a warning: WARNING: Performing this operation while a Netscape product is running could cause corruption of your security databases. If a Netscape product is currently running, you should exit the product before continuing this operation. Type 'q <enter>' to abort, or <enter> to continue: After you press Enter, the tool enables the slot and displays the following: Using database directory C:\databases. . . Slot "Cryptographic Reader" enabled. Enabling FIPS Compliance You could enter something like the following example to enable FIPS-140-1 compliance in Netscape Administration Server's internal module: modutil -fips true Before running this program, the modutil tool displays a warning: WARNING: Performing this operation while a Netscape product is running could cause corruption of your security databases. If a Netscape product is currently running, you should exit the product before continuing this operation. Type 'q <enter>' to abort, or <enter> to continue: After you press Enter, the tool enables FIPS compliance and displays the following: FIPS mode enabled. Adding a Cryptographic Module You could enter something like the following example to add a new cryptographic module to the database: C:\modutil> modutil -dbdir "C:\databases" -add "Cryptorific Module" -libfile "C:\winnt\system32\crypto. dll" -mechanisms RSA:DSA:RC2:RANDOM Before running this program, the modutil tool displays a warning: Chapter 8 Administration Server Command-Line Tools 161 modutil WARNING: Performing this operation while a Netscape product is running could cause corruption of your security databases. If a Netscape product is currently running, you should exit the product before continuing this operation. Type 'q <enter>' to abort, or <enter> to continue: After you press Enter, the tool adds the module and displays the following: Using database directory C:\databases. . . Module "Cryptorific Module" added to database. [. . . ] slot The portion of a PKCS #11 module that contains a security device. A slot can be implemented in either hardware or software. 290 Managing Servers with Netscape Console · December 2001 smart card A small device (typically about the size of a credit card), that contains a microprocessor and is capable of storing keys and certificates, as well as performing cryptographic operations. Smart cards implement some or all of the PKCS #11 interface. SNMP See Simple Network Management Protocol (SNMP). SNMP master agent Software that exchanges information between SNMP subagents and a network management station. [. . . ]