Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual page 168

Installing an Online Certificate Status Manager
❍
168 Red Hat Certificate System Administrator's Guide • September 2005
Locate your request, click Details to see it, and make any changes. Then,
VII.
scroll down to the bottom of the form and click Accep this request.
After the certificate is generated, click Show Certificate.
VIII.
When the certificate is displayed, scroll down to the base-64 encoded version
IX.
of the certificate, highlight all the text (including
CERTIFICATE -----
the clipboard or to a text file.
Be sure to not make any changes to the certificate. You're required to paste
the encoded certificate into the Installation Wizard next. So, once you've
copied the certificate, go back to the wizard screen (Step 13).
Also note that you might be required to paste the CA certificate chain in the
Installation Wizard. So, keep the browser window open.
To submit your certificate request manually to a Certificate Manager, follow these
steps:
Open a web browser window.
I.
Go to the end-entity URL for the Certificate Manager that will issue the
II.
Online Certificate Status Manager's signing certificate.
For example, if you assigned the port number 17006 to the non-SSL
end-entity port for your CA, you would go to the URL
http://<hostname>:17006
end entities.
Click Manual OCSP Manager Signing Certificate Enrollment.
III.
In the OCSP Responder Enrollment page that appears, paste the request from
IV.
the clipboard into the field labeled PKCS #10 Request and fill in any other
required information.
Click Submit.
V.
If the request contains all the required information, you'll get a notification of
VI.
request being successfully added to the agent queue of that Certificate
Manager for approval by that Certificate Manager's agent. If you've
permission to access that Certificate Manager's Agent interface, you can
follow the instructions below to issue the certificate.
In the web browser window, enter the URL for the Certificate Manager's
VII.
Agent Services page. (You must have a valid agent's certificate.)
Select List Requests, then click Show Pending Requests and click Find. The
VIII.
pending request list is displayed.
and
-----END CERTIFICATE-----
to bring up the Certificate Manager page for
-----BEGIN
), and copy it to