Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual page 166

Installing an Online Certificate Status Manager
Internal Database. Choose to either create a new internal database for this instance or
5.
to use an existing Directory Server instance as the internal database for this instance.
Next, specify the information for that Directory Server instance. See "Internal
Database," on page 164 for more information.
Click Next to continue. The wizard sets up the new internal database, which takes some
time.
Click Next to continue.
Administrator. Type the user ID, name and password for the CS administrator. This
6.
user ID will be set up as the administrator who can access the CS window and control
all CS settings.
Allow Multiple Roles for Users. Select if you want to allow users to belong to more
than one group, thus assuming more than one role. Deselect if you want to restrict users
from being able to belong to more than one role. This setting only applies to the default
administrator, agent, auditor roles.
Click Next to continue.
Subsystems. Choose a subsystem you want to install.
7.
Select Online Certificate Status Manager.
Click Next to continue.
Network Configuration. Type the numbers for the ports to be used by the CS instance.
8.
The OCSP-compliant clients will use this port to communicate with the Online
Certificate Status Manager.
Click Next to continue.
Key-Pair Information for Online Certificate Status Manager Signing Certificate.
9.
❍
❍
❍
Click Next to continue.
166 Red Hat Certificate System Administrator's Guide • September 2005
Token. Enter either
internal
the name of an external token to store the Online Certificate Status Manager
signing certificate and key pair. If you have not previously initialized the token's
password, you must do so in this screen. See "Tokens," on page 164 for more
information.
Key Type. Choose RSA or DSA.
Key Length. Available key sizes for RSA are 512, 768, 1024, 2048, 4096, or
Custom. Available key sizes for DSA are 512, 1024, or Custom (which must be in
increments of 64 bits only).
See "Signing Key Type and Length" on page 165 for more information.
(if you plan to use the internal/software token) or