Apple 10.6 Server User Manual


 
Chapter 4 Enhancing Security 63
The Server Admin interface is shown below, with Certicates selected.
Certicate Manager provides integrated management of SSL certicates in
Mac OS X Server for services that allow the use of SSL certicates. On installation,
the server creates a self-signed certicate for immediate use from information you
put in during server setup.
Certicate Manager uses Mac OS X’s Certicate Assistant to create self-signed
certicates and certicate-signing requests (CSRs) to obtain certicates signed by a
CA. The certicates, self-signed or signed by a CA, are then accessible by services that
support SSL.
Certicate Manager in Server Admin doesn’t allow you to sign and issue certicates
as a CA, nor does it allow you to sign and issue certicates as a root authority. If you
need these functions, you can use Certicate Assistant in Keychain Access (located in
/Applications/Utilities/). It provides these capabilities and others for working with x.509
certicates.
Identities that were created and stored in OpenSSL les can also be imported into
Certicate Manager. They are accessible to services that support SSL. Self-signed and
CA-issued certicates you created in CA Assistant can be used in Certicate Manager
by importing the certicate.
Certicate Manager displays the following for each certicate:
The domain name the certicate was issued for Â
The expiration date of the certicate Â
When selected, the detailed contents of the certicate Â