Red Hat CERTIFICATE SYSTEM 7.2 - ADMINISTRATION Administration Manual page 506

Index
Certificate Manager, 15
administrators
creating, 116, 360
agents
creating, 116, 360
as root CA, 7
as subordinate CA, 7
CA hierarchy, 7
CA signing certificate, 192
chaining to third-party CAs, 8
clone CA, 14
cloning, 8
configuring
SMTP settings for notifications, 65
DRM and, 13, 15
installed by itself, 13
key pairs and certificates
CA signing certificate, 103
OCSP signing certificate, 104
SSL server certificate, 104
wTLS CA signing certificate, 104
manual updates to publishing directory, 328
master CA, 14
serial number range, 113
what to do when exhausts all serial numbers,
113
certificate revocation
authentication during, 287
reasons for, 290
who can revoke certificates, 290
Certificate Setup Wizard, 195, 199
using to install certificate chains, 222
using to install certificates, 222
Certificate System
backing up, 99
restoring, 99
SELinux, 22
standards supported by, 21, 22
Certificate System architecture
high availability, 417
Certificate System console
Configuration tab, 59
introduction, 59
managing logs, 84
Status tab, 60
Certificate System Console
configuring authentication, 345, 348, 350
Certificate System data
where it is stored, 95
certificate-based authentication
defined, 455
486
certificate-based enrollment, 353
forms for, 353
what you need, 353
when to use, 353
certificateIssuer, 446
certificatePolicies, 431
certificates
and LDAP Directory, 468
authentication using, 455
CA certificate, 459
chains, 464
contents of, 460
extensions for, 115, 425
how to revoke, 290
installing, 221
issuing of, 467
management formats and protocols, 22
publishing to files, 304
publishing to LDAP directory
required schema, 326
revocation reasons, 290
revoking, 469
S/MIME, 458
self-signed, 463
serial numbers
what to do when a CA exhausts all, 113
storing user's, 219
verifying a certificate chain, 465
X.509 specification, 22
certutil
requesting certificates, 211
changing
DER-encoding order of DirectoryString, 122
group members, 365
trust settings in certificates, 228
why would you change, 228
ciphers
defined, 450
client authentication
SSL client certificates defined, 458
clone CA, 14
cloning, 8
setting up server for multiple requests, 351
CMC, 22
CMMF, 21
command-line utilities
for adding extensions to Certificate System
certificates, 208
configuration file, 66
comments and other ignored text, 67
copying from one instance to another, 68