Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual page 222

Configuring Key Archival and Recovery Process
b.
c.
Update the JavaScript method in the enrollment form.
2.
To do this:
a.
b.
c.
d.
222 Red Hat Certificate System Administrator's Guide • September 2005
Use the command-line tool called
from the Data Recovery Manager's certificate database. (For information on the
tool, check this site:
certutil
http://www.mozilla.org/projects/security/pki/nss/tools/
First, go to this directory:
Next, run this command:
-d . -n kraTransportCert cert-<instance_id> -a
The transport certificate appears. View the certificate information. Make sure that
the certificate you are looking at is the correct one; the certificate shows the DN
that was specified for the transport certificate during the installation of Data
Recovery Manager.
Copy the base-64 encoded certificate, excluding the marker lines
and
CERTIFICATE-----
copied information should look like the example below:
MIICDjCCAXegAwIBAgICAfMwDQYJKoZIhvcNAQEEBQAwdzELMAkGA1UEBhMCV
VMxLDAqBgNVBAoTI0
5ldHNjYXBlIENvbW11bmljYXRpb25zIENvcnBvcmF0aW9uMREwDwYDVQQLEwh
IYXJkY29yZTEnMCUG
A1UEAxMeSGFyZGNvcmUgQ2VydGlmaWNhdGUgU2VydmVyIElJMB4XDTk4MTExO
TIzNDIxOVoXDTk5MD
UxODIzNDIxOVowLjELMAkGA1UEBhMCVVMxETAPBgNVBAoTCG5ldHNjYXBlMQw
wCgYDVQQDEwNLUmEw
XDANBgkqhkiG9w0BAQEFAANLADBIAkEArrbDiYUI5SCdlCKKa0bEBn1m83kX6
bdhytRYNkdHB95B
Go to the host system of the enrollment authority and locate the user-enrollment
form. The default forms are at these locations:
<server_root>/cert-<instance_id>/web-apps/ee ca
<server_root>/cert-<instance_id>/web-apps/ee/ra
Open the enrollment form (ProfileSelect.template) that you want to use in a text
editor.
In the form, locate the
generateCRMFRequest()
Add a variable for the transport certificate.
Below the commented text, add this line:
var kraTransportCert =
to retrieve the transport certificate
certutil
<server_root>/cert-<instance_id>/config
<server_root>/bin/cert/tools/certutil -L
-----END CERTIFICATE-----
-----BEGIN
, to a text file. The
and
JavaScript method.