Tokens; Internal Database - Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual

The Data Recovery Manager uses its SSL server certificate to do SSL server-side
authentication to the following:
• The end entity services interface (the HTTPS port)
• The Data Recovery Manager Agent Services interface
By default, the Data Recovery Manager uses a single SSL server certificate for
authentication purposes. However, you can request and install additional SSL server
certificates for the Data Recovery Manager. For example, you can configure the Data
Recovery Manager to use separate server certificates for authenticating to Red Hat Console,
the end entity services interface, and the Data Recovery Manager Agent Services interface.
For instructions, see "Configuring the Server to Use Separate SSL Server Certificates" on
page 310.

Tokens

You choose either the
internal
external token to store the signing certificate and key pair and the SSL signing certificate
and key pair.
If you are using an external token, you will need to install it before you run the Installation
Wizard. In the wizard, you can select from a list of already installed and available tokens.
For example,
SmartCard

Internal Database

Each subsystem uses an internal database to store information (such as certificates and
certificate requests) used by the subsystem you will be installing in this CS instance. By
default, a separate internal database is created for each subsystem you configure. You can
choose to use the same internal database for more than one subsystem by specifying this
when running the installation wizard to configure that subsystem. You should carefully
consider whether you want to store this information in a separate internal database for each
subsystem or use one internal database for all subsystems installed on the host.
It's recommended that you do not use this Directory Server instance for any other purposes;
the directory schema will be configured for storing CS data.
token (if you plan to use the internal/software token) or an
. For installation instructions, see "External Token" on page 306.
Installing a Standalone Data Recovery Manager
Chapter 6 Data Recovery Manager 205