- Can the iPlanet Enterprise Server Operate with the IBM 4758 PKCS#11 Support Program?
Yes.
- Is iPlanet Enterprise Server the same as Netscape Enterprise Server?
Yes. Due to the recent alliance between Netscape and Sun, Netscape Enterprise Server has been renamed iPlanet Enterprise Server.
- Where do I download iPlanet Enterprise Server?
Downloads, more f.a.q.'s and documentation are available from www.iplanet.com
- Is the typical installation of iPlanet Enterprise Server sufficient for the IBM 475=8?
Yes.
- What ports should I choose for my servers?
The default port ( 8888 ) should be sufficient for the Admin Server, but port 443 is preferable for the debugger server
- Why are there two magnus.conf files?
There is one magnus.conf file for the admin server, and one for the debugger server. Be very careful when editing these files, because it is very easy to edit the wrong one, and this can lead to unpredictable results.
- I edited one of the magnus.conf files but the change did not seem to take effect. What do I need to do?
After editing a magnus.conf file for a particular server, you should stop and then restart that server for the changes to take effect.
- From what directory should I run the modutil program?
It is VERY important that you either run the modutil program from the "alias" directory, or specify that the dbdir (database directory) should be the "alias" directory. It would be a good idea to move the modutil program to a "tools" directory of some variety and modify the path environment variable to point to the executable because it is a frequently used tool for the server.
- How do I check what modules iPlanet Server recognizes?
Use modutil's -list option. For example, from the alias directory ( where the databases should be ) modutil -list -dbdir . would show a list of modules iPlanet recognizes.
- Why is it a good idea to run csunclu to check the status of the IBM 4758 before installing certificates?
Because the server will not recognize the IBM 4758 unless it is running.
- When I try to install the trusted Certificate Authority Certificate / Host Certificate I can not select the IBM 4758 module. What do I do?
First, run modutil with the -list option to see what the server recognizes. Also make sure that the IBM 4758 is running with csunclu. If both of these don't work, stop and restart your server and try again. Finally, if none of these work, double check that a trust database has been created and that it is appropriately named.
- Which comes first? The trusted certificate authority certificate or the host certificate?
You must install the trusted certificate authority certificate before you install the host certificate.
- What is the difference between http:// and https:// ?
Http is for unsecured servers, https is for secure servers. If you have turned the security on for a server, it needs to be addressed with https:// instead of http. If you try to access a secure server with http:// Netscape typically reports an error along the lines of "server not found".
- What do I need to add / delete from the magnus.conf file(s)?
Make sure security is set to "on".
Set CertDefaultNickname ( note: be very careful to give the magnus.conf file the right certificate name. )
Select which ciphers to use and which to exclude.
- When do I need to run tok_obj.exe?
Just once, immediately after installing iPlanet Enterprise Server.
- What version of iPlanet Enterprise Server should I download?
The version tested for this f.a.q. was version 4.1 service pack 5.
- Can I view these web pages with Microsoft Internet Explorer?
Yes.
- Does it matter on which drive I install iPlanet Enterprise Server?
Provided there is enough room, it does not matter to which drive iPlanet Enterprise Server is installed.
- How do I know the name of my certificates when adding the value for CERTDefaultNickname in the magnus.conf file?
From the manage certificates option, select the certificate you want, and choose to manage that certificate. The name should be located somewhere in the information presented about the certificate.
|
pSeries 