Obtaining a key pair and certificate

Sybase PKCS #11 includes two sample server certificates. You can use these certificates when communicating with EAServer from your browser. You can also request new certificates from your CA or certificate server and install them in your browser.

In general, the steps involved in obtaining a certificate from a CA are:

  1. Initiate a certificate request operation by connecting to a Web server hosting the public-key infrastructure (PKI) administration HTML pages for the CA/PKI.

  2. On the PKI administration Web page, complete the identity information form required by the CA.

  3. Netscape generates a key pair, and stores the private key in the PKCS #11 module. The public key is digitally signed and forwarded to the CA.

    You must be logged in to the PKCS #11 module to store or access the private key.

  4. The CA approves the request, generates the certificate, and makes the certificate downloadable by way of a URL.

  5. The CA notifies you of certificate approval and URL location through e-mail.

  6. Open the URL to get the certificate. You must log in to the PKCS #11 module using the previously established PIN. The browser automatically installs the certificate, locates the previously stored matching private key using the key ID, and sets the user-specified label.