Certificate Setup Wizard - Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual

Certificate Setup Wizard

CS provides a wizard, called the Certificate Setup Wizard, which automates the process of
requesting and installing the certificates required by the CS manager—Certificate Manager,
Registration Manager, Data Recovery Manager, or Online Certificate Status
Manager—installed in a CS instance.
The Certificate Setup Wizard is integrated into the CS window, enabling you to accomplish
the following tasks:
• Renew certificates of the CS managers installed in a CS instance; renewing a certificate
means getting a new certificate with the same subject name and public and private key
material as that of the existing certificate, but with an extended validity period.
• Request and install new certificates for the CS managers installed in a CS instance;
reissuing or requesting a new certificate means getting a certificate based on a new
public and private key pair.
• Install CA certificates in the certificate or trust database of a CS instance.
• Install CA certificate chains in the certificate database of a CS instance.
When you start the wizard, which you do by clicking the Certificate Setup Wizard button in
the Encryption tab of the CS window, you are asked to specify whether you want to request
or install a certificate. The wizard presents you with the screens appropriate to your choice
and walks you through the entire process.
For installing certificates, except for cases when the certificate is self-signed by the CA, you
will need to run the wizard twice: once, to request the certificate and once to install the
certificate. The reason for this is, if you submit the certificate request to a non-local CA,
you will have to wait for the certificate until it is delivered to you.
The following sections explain the process of requesting and installing a certificate by using
the Certificate Setup Wizard:
• Using the Wizard to Request a Certificate
• Using the Wizard to Install a Certificate or Certificate Chain
Using the Wizard to Request a Certificate
The Certificate Setup Wizard allows you to request any of the certificates used by the
Certificate Manager, Registration Manager, Data Recovery Manager, or Online Certificate
Status Manager installed in the currently selected CS instance.
Managing the Certificate Database
Chapter 8 Administrative Basics 289