<!doctype HTML public "-//W3C//DTD HTML 4.0 Frameset//EN">

<html>

<!--(==============================================================)-->
<!--(Document created with RoboEditor. )============================-->
<!--(==============================================================)-->

<head>

<title>Managing Certificates</title>

<!--(Meta)==========================================================-->

<meta name=generator content="RoboHELP by eHelp Corporation - www.ehelp.com">
<meta name=generator-major-version content=0.1>
<meta name=generator-minor-version content=1>
<meta name=filetype content=kadov>
<meta name=filetype-version content=1>
<meta name=page-count content=1>
<meta name=layout-height content=648>
<meta name=layout-width content=745>
<meta name=date content="09 24, 2001 10:00:11 AM">


<!--(Links)=========================================================-->

<link rel="StyleSheet" href="JXhelp.css">


<!--(Generated ActiveX Object Tags)=================================-->
<!--(WARNING: DO NOT EDIT OR DELETE THIS SECTION!)==================-->
<!--begin!kadov{{===================================================-->
<!--}}end!kadov=====================================================-->
<!--(==============================================================)-->

</head>

<!--(Body)==========================================================-->


<body>

<h1 style="color: #008080;">Managing Certificates</h1>

<p>You can use 
<OBJECT classid="java:com.sun.java.help.impl.JHSecondaryViewer"  id="0" >
 <param name="content" value="Managing_Certificates_text0_popup_topic.htm">
 <param name="viewerActivator" value="javax.help.LinkLabel">
 <param name="viewerSize" value="400,270">
 <param name="viewerStyle" value="javax.help.Popup">
 <param name="text" value="Secure Sockets Layer">
</OBJECT> (SSL) authentication to communicate securely with a 
 directory server. Two variants are allowed:</p>

<p>&nbsp;</p>

<ul style="list-style: disc;"
	type=disc>
	
	<li class="kadov-p"><p>Simple SSL</p></li>
	
	<li class="kadov-p"><p>Authenticated SSL</p></li>
</ul>

<p>&nbsp;</p>

<p>Simple SSL authenticates the server only, whereas, Authenticated SSL 
 authenticates both the client and the server.</p>

<p>&nbsp;</p>

<p>Both variants require the client to be initialized with the trusted 
 public certificate of the directory server, or the public certificate 
 of the directory server's certificate authority. The trusted public certificates 
 of servers are stored in the <span style="font-style: italic;"><I>cacerts</I></span> 
 keystore file, located in the security directory, under JXplorer.</p>

<p>&nbsp;</p>

<p>In addition to the above, Authenticated SSL requires the registration 
 of the client's trusted public certificate (or the public certificate 
 of the client's certificate authority) with the directory server, and 
 use of the client's private key. Trusted public certificates and private 
 keys of clients are stored in the <span style="font-style: italic;"><I>clientcerts</I></span> 
 keystore file, located in the security directory, under JXplorer.</p>

<p>&nbsp;</p>

<p>When you add or delete a certificate, or private key, the keystore files 
 are updated and encrypted. You <!--kadov_tag{{<spaces>}}-->&nbsp;<!--kadov_tag{{</spaces>}}-->can 
 set a password to stop unauthorized changes to these files.</p>

<p>&nbsp;</p>

<h4>Related Topics</h4>

<p><a href="Adding_a_Certificate.htm">Adding a Certificate</a></p>

<p><a href="Adding_a_Private_Key.htm">Adding a Private Key</a></p>

<p><a href="Deleting_a_Certificate.htm">Deleting a Certificate</a></p>

<p><a href="Exporting_a_Private_Key.htm">Exporting a Private Key</a></p>

<p><a href="Setting_a_Keystore_Password.htm">Setting a Keystore Password</a></p>

<p><a href="Viewing_a_Certificate.htm">Viewing a Certificate</a></p>

<p>&nbsp;</p>

<p>
<hr>
<font size=-2>
&copy; 2002 Computer Associates International, Inc. (CA)
<br>All trademarks, trade names, service marks, and logos referenced herein
belong to their respective companies.
</font>
</body>

</html>
