Red Hat CERTIFICATE SYSTEM 7.2 - ADMINISTRATION Administration Manual page 509

how it works, 144
how keys are stored, 143
how to set up, 147
PKI setup required, 141
reasons to archive, 143
where keys are stored, 143
key length, 105
key recovery, 145
designated agents
See key recovery agents, 145
how to set up, 147
key recovery agents
passwords, 145
significance, 145
responsibilities, 145
role defined, 145
KEYGEN tag, 22
keys
defined, 450
management and recovery, 468
keyUsage, 433
L
LDAP, 22
LDAP publishing
defined, 304
manual updates, 328
when to do, 328
who can do this, 328
linked CA, 8
load balancing, 418
locating directory entries for publishing
how to write custom plug-ins, 333
location of
active log files, 74
log modules
deleting, 86
registering new ones, 86
logging
buffered vs. unbuffered, 80
log files
archiving rotated files, 81
default location, 74
signing rotated files, 85
timing of rotation, 80
log levels, 78, 78
default selection, 80
how they relate to message categories, 78
significance of choosing the right level, 80
what it means, 78
managing from Certificate System console, 84
services that are logged, 77
types of logs, 74
Audit, 74
Error, 76
M
mail server used for notifications, 65
managing
certificate database, 221
mapper modules
deleting, 329
registering new ones, 329
mappers
created during installation, 312, 333, 336
mappers that use
CA certificate, 333
DN components, 336
master CA, 14
modifying
privileged user's group membership, 365
N
Name extension modules
Issuer Alternative Name, 266
nameConstraints, 435
naming convention
for internal database instances, 98
netscape-cert-type, 448
nickname
for CA signing certificate, 103
for OCSP signing certificate, 104
for signing certificate, 127
for SSL server certificate, 104, 127
for wTLS signing certificate, 104
notifications
configuring the mail server
hostname, 65
port, 65
to agents about unpublishing certificates, 406
O
OCSP, 12
OCSP publisher, 332
OCSP responder, 125
defined, 12
OCSP server, 125
OCSP signing certificate, 104, 192
nickname, 104
requesting, 199
Online Certificate Status Manager
administrators
489