Configuring Self Test; Setting Up A Mail Server; Changing The Certificate Issuance Rules - Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual

Configuring Self Test

Each subsystem provides self tests that are run on start up and can also be run on demand.
This feature is configurable, see "Self Tests," on page 272 for complete information.

Setting Up a Mail Server

If the subsystem will be sending out email notifications, you can configure the subsystem to
use a mail server, see "Mail Server," on page 250.

Changing the Certificate Issuance Rules

You can change some of the rules about certificate issuance that were either determined
during installation, or are the system defaults. These include:
• Whether certificates can be issued that are for validity periods longer than the
Certificate Managers CA signing certificate, the default is to not allow.
• The serial number range the CA is able to use to issue certificates.
• The signing algorithm used to sign certificates.
To change the certificate issuance rules:
In the CS window, select the Configuration tab.
1.
In the navigation tree, select Certificate Manager.
2.
The General Setting tab appears.
Change the following fields in this tab:
3.
Override validity nesting requirement. Specifies if the Certificate Manager can issue
certificates with validity periods beyond that of its CA signing certificate.
If deselected and the Certificate Manager (CA) receives a request with validity period
extending beyond that of its CA signing certificate, it automatically truncates the
validity period to end on the day the CA signing certificate expires.
Configuring the Certificate Manager
Chapter 3 Certificate Manager 109