Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual page 141

Enter the host name and end-entity port number of the remote Certificate
II.
Manager, and select whether the end-entity port is SSL enabled.
Click Next to submit the request.
III.
The Certificate Request Result screen appears, confirming that the request has
been submitted. Note the request ID provided in the response message. (You
can use it later to retrieve the certificate, once it has been issued, from the
end-entity port.)
Note that your request gets added to the agent queue of the remote Certificate
Manager for approval by that Certificate Manager's agent. If you've
permission to access that Certificate Manager's Agent interface, you can
follow the instructions below to issue the certificate. Otherwise, you should
wait for the remote Certificate Manager's agent to approve your request.
In the web browser window, enter the URL for the remote Certificate
IV.
Manager's Agent Services page. (You must have a valid agent's certificate.)
Select List Requests, click Show Pending Requests, and click Find.
V.
In the pending request list, locate your request, click Details to see it, and
VI.
make any changes. Then, scroll down to the bottom of the form, and click Do
It.
After the certificate is generated, click Show Certificate.
VII.
When the certificate is displayed, scroll down to the base-64 encoded version
VIII.
of the certificate, highlight all the text (including
CERTIFICATE -----
the clipboard or to a text file.
Be sure to not make any changes to the certificate. You're required to paste
the encoded certificate into the Installation Wizard next. So, once you've
copied the certificate, go back to the wizard screen (Step 27).
To submit your certificate request manually to a remote Certificate Manager,
❍
follow these steps:
Open a web browser window.
I.
Go to the end-entity URL for the remote Certificate Manager that will issue
II.
the SSL server certificate.
For example, if you assigned the port number 17006 to the non-SSL
end-entity port for your root CA, you would go to the URL
http://<hostname>:17006
end entities.
and
-----END CERTIFICATE-----
to bring up the Certificate Manager page for
Installing a Registration Manager
-----BEGIN
), and copy it to
Chapter 4 Registration Manager 141