Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual page 277

Administration Port
The administration port is an SSL (encrypted) port on which CS listens to requests from its
administration interface, the CS console. When you install CS, a random number (greater
than 1024) is assigned to the administration port. You can change this port number at any
time, to any number between 1 and 65535.
Agent Port
The agent port is an SSL (encrypted) port on which CS listens to requests from agents;
agents make these requests from the appropriate Agent Services interface.
• The Certificate Manager and Registration Manager agents use the agent port to process
certificate issuance and management requests from end entities and to perform certain
other privileged operations over HTTPS.
• Data Recovery Manager agents use the agent port for recovering end users' encryption
private keys over HTTPS.
Agent functions always require SSL client authentication.
When you install CS, it assigns a random number (greater than 1024) as the agent port
number and prompts you to change it, if necessary; the port number can be any number
between 1 and 65535. The number you choose for the agent port affects your agent
users—all agents access CS by specifying the name of the server (the CS instance) and the
agent port number in the URL. For example, if you choose port number 4430, the URL
would look like this:
https://<hostname>:4430/<subsystem>
is in the form
<hostname>
is a prefix identifying the subsystem that hosts the agent interface:
<subsystem>
Certificate Manager,
ra
and for Online Certificate Status Manager.
ocsp
For example, the URL to a Certificate Manager agent interface would look like this:
https://demoCA.example.com:5600/ca
If you change the agent port number, be sure to inform your agent users.
End-Entity Ports
For requests from end entities, CS can listen to two ports, an SSL (encrypted) port and a
non-SSL port. End entities make these requests from the end entity services interface.
CS provides the following services through the HTTP and HTTPS ports:
<machine_name>.<your_domain>.<domain>
for the Registration Manager, for the Data Recovery Manager,
kra
Chapter 8 Administrative Basics
Ports
for the
ca
277