Red Hat CERTIFICATE SYSTEM 6.0 - MIGRATION GUIDE Manual page 72

Chapter 10. Step 9: Generate New Certificate System Server Certificates
a. In the Type of Operation panel, select the Request a certificate option (the default).
b. In the Certificate Selection panel, select SSL Server Certificate from the pull-down
menu. An SSL server certificate request is generated, which can be submitted to a CA for
approval.
c. In the Key-Pair Information for the SSL Server Certificate, select Create new key pair.
Fill in information in the other fields.
d. The next panel is Subject Name for the SSL Certificate. For the
fully qualified domain name of the Certificate System subsystem machine, such as
omega.example.com
recommends filling in the
e. Click through the remaining panels in the Certificate Setup Wizard.
7. Obtain the SSL server certificate request, and store it in a base-64 file.
8. Submit the SSL server certificate request to a CA, and wait for approval of the request.
9. After the SSL server certificate is approved, click the Add/Renew button to relaunch the
Certificate Setup Wizard.
a. In the Type of Operation panel, select the Install a certificate option.
b. In the Certificate Selection panel, select SSL Server Certificate from the pull-down
menu.
c. Set the location information in the Location of Certificate if required.
d. Click through the remaining panels in the Certificate Setup Wizard to install the new SSL
server certificate for the migrated subsystem instance.
10. R estart the Certificate System subsystem instance.
/etc/init.d/rhpki-kra restart
66
. Fill in information in the other fields on this panel; Red Hat strongly
and components also.
o c
component, enter the
cn