Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual page 172

Installing an Online Certificate Status Manager
CS provides command-line tools for generating extensions to include in CA and other
certificate requests. For details about these tools, check this directory:
<server_root>/bin/cert/tools
Note that the certificate extension text field accepts a single extension blob. If you want
to add multiple extensions, you should use the
provided in the
Chapter 5, "Extension Joiner Tool" of CS Command-Line Tools Guide.
Click Next to continue.
SSL Server Certificate Request Creation. This is an informational screen that tells
20.
you that the wizard has all the information required to generate the key pair and
certificate request. In the previous screen, if you chose to include the Subject Key
Identifier extension in the certificate, you'll be given the choice to select the format for
the certificate request. Otherwise, the request format will be PKCS #10.
❍
❍
Click Next. The wizard generates the certificate request that you must submit to a CA.
Submission of Request. Select whether you want to submit the request manually or
21.
send the request to a remote CS server (Certificate Manager or Registration Manager)
automatically.
❍
172 Red Hat Certificate System Administrator's Guide • September 2005
directory. For details on using the
tools
If you want the wizard to generate the certificate request in PKCS #10 format,
select the "Generate PKCS10 request" option.
If you want the wizard to generate the certificate request in CMC format, select the
"Generate CMC full enrollment request" option.
To automatically submit the request to a remote Certificate Manager (or for
automatic enrollment), follow these steps:
Select the "Send the request to a remote CS now" option.
I.
Enter the host name and end-entity port number of the Certificate Manager,
II.
and select whether this end-entity port uses SSL.
Click Next to submit the request.
III.
The Certificate Request Result screen appears, confirming that the request has
been submitted. Note the request ID provided in the response message. (You
can use it later to retrieve the certificate, once it has been issued, from the
end-entity port.)
Note that your request gets added to the agent queue of the Certificate
Manager for approval by that Certificate Manager's agent. If you've
permission to access that Certificate Manager's Agent interface, you can
follow the instructions below to issue the certificate. Otherwise, you should
wait for the other agent to approve your request and issue the certificate.
program, which is also
ExtJoiner
ExtJoiner
program, see