Requesting A New Ssl Server Certificate From A Third-Party Ca - Red Hat CERTIFICATE SYSTEM 7.0 - MIGRATION GUIDE Manual

Chapter 10. Step 9: Generate New Certificate System Server Certificates
Algorithm panel.
e. The next panel is Subject Name for the SSL Certificate. For the
fully qualified domain name, such as
instance machine. Fill in information in the other fields on this panel as necessary (Red
Hat strongly recommends filling in the
f. For the rest of the panels in the wizard, click next, and either fill in the options as desired
or accept all of the default settings.
8. Restart the Certificate System 7.3 CA instance.
/etc/init.d/rhpki-ca restart
2. Requesting a New SSL Server Certificate from a
Third-Party CA
1. Start the CA Console.
pkiconsole https://server.example.com:9443/ca
2. Select the newly-migrated Certificate System instance, and open the Console for that
instance.
3. In the Certificate System Console, select the Configuration tab.
4. In the left menu, select the Keys and Certificates option.
5. Select the Local Certificates tab on the right.
6. Press the Add/Renew button to launch the Certificate Setup Wizard.
7. Go through the screens in the wizard to request the certificate.
a. In the Type of Operation panel, select the Request a Certificate option (the default).
b. In the Certificate Selection panel, select SSL Server Certificate from the pull-down
menu, and choose the Create a request for submission to another CA option. An SSL
server certificate request is generated to submit to a CA for approval.
c. In the Key-Pair Information for the SSL Server Certificate panel, select Create new
key pair. Fill in information in the other fields on this panel.
d. The next panel is Subject Name for the SSL Certificate. For the
fully qualified domain name of the Certificate System 7.3 CA instance machine, such as
76
, of the Certificate System 7.3 CA
zeta.example.com
and components).
o c
component, enter the
cn
component, enter the
cn