<!doctype HTML public "-//W3C//DTD HTML 4.0 Frameset//EN">

<html>

<!--(==============================================================)-->
<!--(Document created with RoboEditor. )============================-->
<!--(==============================================================)-->

<head>

<title>Adding a Certificate</title>

<!--(Meta)==========================================================-->

<meta name=generator content="RoboHELP by eHelp Corporation - www.ehelp.com">
<meta name=generator-major-version content=0.1>
<meta name=generator-minor-version content=1>
<meta name=filetype content=kadov>
<meta name=filetype-version content=1>
<meta name=page-count content=1>
<meta name=layout-height content=909>
<meta name=layout-width content=614>
<meta name=date content="09 12, 2002 5:02:03 PM">


<!--(Links)=========================================================-->

<link rel="StyleSheet" href="JXhelp.css">


<!--(Generated ActiveX Object Tags)=================================-->
<!--(WARNING: DO NOT EDIT OR DELETE THIS SECTION!)==================-->
<!--begin!kadov{{===================================================-->
<!--}}end!kadov=====================================================-->
<!--(==============================================================)-->

</head>

<!--(Body)==========================================================-->


<body>

<h1>Adding a Certificate</h1>

<p>If you want to use 
<OBJECT classid="java:com.sun.java.help.impl.JHSecondaryViewer"  id="0" >
 <param name="content" value="Adding_a_Certificate_text0_popup_topic.htm">
 <param name="viewerActivator" value="javax.help.LinkLabel">
 <param name="viewerSize" value="400,270">
 <param name="viewerStyle" value="javax.help.Popup">
 <param name="text" value="Secure Sockets Layer">
</OBJECT> (SSL) authentication to communicate securely with a 
 directory server, you must add the trusted public certificate of the directory 
 server, or the public certificate of the directory server's certificate 
 authority, to the <span style="font-style: italic;"><I>cacerts </I></span>keystore 
 file. </p>

<p>&nbsp;</p>

<p>If you want to strengthen the security and validate the client as well, 
 you must add the client's trusted public certificate (or the public certificate 
 of the client's certificate authority), and the corresponding private 
 key, to the <span style="font-style: italic;"><I>clientcerts </I></span>keystore 
 file. See <a href="Adding_a_Private_Key.htm">Adding a Private Key</a> 
 for more information on adding a private key.</p>

<p>&nbsp;</p>

<p>When you add a certificate, the <span>keystore </span>files are updated 
 and encrypted. </p>

<p>&nbsp;</p>

<p>To add a certificate:</p>

<p>&nbsp;</p>

<p>1. <!--kadov_tag{{<spaces>}}-->&nbsp;<!--kadov_tag{{</spaces>}}-->Do 
 <span style="font-weight: bold;"><B>one</B></span> of the following:</p>

<p>&nbsp;</p>

<ul style="list-style: disc;"
	type=disc>
	
	<li class="kadov-p"><p>If you are setting up server authenticated SSL, 
 from the Security Menu, choose Trusted Servers and CAs.</p></li>
	
	<li class="kadov-p"><p>If you are setting up client authenticated SSL, 
 from the Security Menu, choose Client Certificates.</p></li>
</ul>

<p>&nbsp;</p>

<p>2. <!--kadov_tag{{<spaces>}}-->&nbsp;<!--kadov_tag{{</spaces>}}-->Click 
 the Add Certificate button.</p>

<p>&nbsp;</p>

<p>3. <!--kadov_tag{{<spaces>}}-->&nbsp;<!--kadov_tag{{</spaces>}}-->From 
 the Open dialog, choose the trusted public certificate that you want to 
 add to the keystore, and then click the Open button. </p>

<p>&nbsp;</p>

<p>4. <!--kadov_tag{{<spaces>}}-->&nbsp;<!--kadov_tag{{</spaces>}}-->Confirm 
 that this is the certificate that you want to add, and then click OK.</p>

<p>&nbsp;</p>

<p>5. <!--kadov_tag{{<spaces>}}-->&nbsp;<!--kadov_tag{{</spaces>}}-->Enter 
 a name for the certificate, and then click OK. </p>

<p>&nbsp;</p>

<p>6. <!--kadov_tag{{<spaces>}}-->&nbsp;<!--kadov_tag{{</spaces>}}-->Enter 
 the keystore password, and then click OK.</p>

<p>&nbsp;</p>

<p>7. <!--kadov_tag{{<spaces>}}-->&nbsp;<!--kadov_tag{{</spaces>}}-->Click 
 OK to close the dialog.</p>

<h4>Related Topics</h4>

<p><a href="Adding_a_Private_Key.htm">Adding a Private Key</a></p>

<p><a href="Deleting_a_Certificate.htm">Deleting a Certificate</a></p>

<p><a href="Exporting_a_Private_Key.htm">Exporting a Private Key</a></p>

<p><a href="Managing_Certificates.htm">Managing Certificates</a></p>

<p><a href="Setting_a_Keystore_Password.htm">Setting a Keystore Password</a></p>

<p><a href="Viewing_a_Certificate.htm">Viewing a Certificate</a></p>

<p>&nbsp;</p>


<!--(HR)============================================================-->
<hr style="/*begin!kadov{{*/ float: aligncenter; /*}}end!kadov*/ ">


<p><font style="font-size: xx-small;"
		size=1>� 2002 Computer Associates International, Inc. (CA) <br>
All trademarks, trade names, service marks, and logos referenced herein 
 belong to their respective companies. </font></p>

</body>

</html>
