Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual page 302

Managing the Certificate Database
• Cross-Signed Certificate—choose this option if you want to install a cross-signed
certificate.
• Untrusted CA Certificate Chain—choose this option if you want to install an untrusted
CA certificate chain.
Step 3. Specify the Location of the Certificate
Locate the certificate or certificate chain you want to install.
You can keep the certificate or certificate chain in a text file or copy it to the text area on the
wizard screen. Here is some information that will help you decide on the location.
• Keeping the certificate or certificate chain in a text file—the wizard can import a
certificate or certificate chain from a text file in text as well as binary formats; see
"Data Formats for Installing Certificates and Certificate Chains" on page 300. If you
have copied the certificate or certificate chain to a text file, you will be required to
provide the wizard with the absolute path to that file. The file must be located in the
host system the wizard is running. If the file is located elsewhere, exit from the wizard,
copy the file to the local disk, and restart the wizard.
• Copying the certificate or certificate chain to the text area on the wizard screen—you
can paste the certificate or certificate chain into the text area provided by the wizard.
This is a text input field, so you can paste the certificate or certificate chain in text
format only. For example, if you are installing a certificate, it base-64 encoded
certificate blob should look similar to this:
-----BEGIN CERTIFICATE-----
MIICKzCCAZSgAwIBAgIBAzANgkqkiG9w0BAQQFADA3MQswCQYDVQQGEwJVUzERMA
8GA1UEChMITmV0c2Nh
cGUxFTATBgNVBAsTDFN1cHJpeWEncyBDQTAeFw05NzEwMTgwMTM2MjVaFw05OTEw
MTgwMTM2MjVaMEgxCz
AJBgNVBAYTAlVTMREwDwYDVQQKEwhOZXRzY2FwZTENMAsGA1UECxMEUHawczEXMB
UGA1UEAxMOU3Vwcml5
YSBTaGV0dHkwgZ8wDQYJKoZIhdfNAQEBBQADgY0AMIGJAoGBAMr6eZiPGfjX3uRJ
gEjmKiqG7SdATYzBcA
Bu1AVyd7chRFOGD3wNktbf6hRo6EAmM5R1Askzf8AW7LiQZBcrXpc0k4du+2j6xJ
u2MPm8WKuMOTuvzpo+
SGXelmHVChEqooCwfdiZywyZNmgaMa2MS6pUkfQVAgMBAAGjNjA0MBEGCWCGSAGG
+EIBAQQEAwIAgD
-----END CERTIFICATE-----
• The certificate is at the CS where your request was sent— if you have previously sent
the certificate request to a remote Certificate Manager automatically and have noted the
request ID that you received in return, you can use it to retrieve the certificate from the
Certificate Manager.
302 Red Hat Certificate System Administrator's Guide • September 2005