Table of Contents
Advertisement
omega.example.com
recommended that the
e. Go through the remaining panels in the Certificate Setup Wizard, and fill in the different
fields or use the defaults.
8. Obtain the SSL server certificate request, and store it in a base-64 file.
9. Submit the SSL server certificate request to another CA and wait for approval of the request.
10. O nce the SSL server certificate has been approved, press the Add/Renew button to
relaunch the Certificate Setup Wizard.
a. In the Type of Operation panel, select the Install a certificate option.
b. In the Certificate Selection panel, select SSL Server Certificate from the pull-down
menu.
c. Enter in any necessary information in the Location of Certificate panel.
d. Go through the remaining panels in the Certificate Setup Wizard to install the updated SSL
server certificate.
11. R estart the Certificate System CA instance.
/etc/init.d/rhpki-ca restart
3. Generating a New DRM, OCSP, or TKS SSL Server
Certificate
1. Open the subsystem instance's administrative console. For example, for the DRM
subsystem:
pkiconsole https://server.example.com:10043/kra
2. Select the newly-imported Certificate System instance, and log into the Console for the
instance.
3. Open the Configuration tab.
4. Select the System Keys and Certificates option from the menu on the left.
5. Select the Local Certificates tab on the right.
6. Click the Add/Renew button to launch the Certificate Setup Wizard.
. Fill in information in the other fields on this panel; it is strongly
and
components also be filled in.
o
c
Generating a New DRM, OCSP, or TKS SSL
77
Advertisement
Table of Contents
