Getting An Ssl Client Certificate For A Subsystem - Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual
Hide thumbs
Also See for CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR:
Table of Contents
Advertisement
To change the certificate used for authenticating to the end-entity services
❍
interface, edit the value assigned to the
id="ee_nonSSL"
To change the certificate used for authenticating to the SSL-enabled end-entity
❍
services interface, edit the value assigned to the
parameter in the
To change the certificate used for authenticating to the administration interface,
❍
Red Hat Console, edit the value assigned to the
in the
id="admin"
Save your changes and close the file.
5.
Start the server; see "Starting, Stopping, and Restarting CS Instances" on page 246.
6.
Getting an SSL Client Certificate for a Subsystem
By default, the Certificate Manager uses its SSL server certificate for SSL client
authentication to the publishing directory.
If you want the Certificate Manager to use another certificate for authenticating to the
publishing directory, you can do so. This section provides instructions for requesting and
installing an SSL client certificate for a Certificate Manager and configuring it to use that
certificate for SSL client authentication to the publishing directory.
Log in the CS console, see "Logging Into the CS Console" on page 239.
1.
Select the Configuration tab, and then select the Encryption tab.
2.
Click the Certificate Setup Wizard button to launch the wizard, which is explained in
3.
"Certificate Setup Wizard" on page 289.
Select the option to request a certificate and then follow the on-screen prompts to
4.
generate a certificate request for the client certificate—in the Certificate Selection
window, select
Other
field.
Once you have the certificate request ready, submit it to a CA so that it can issue a
5.
certificate. For general instructions to use the wizard to request a certificate, see section
"Using the Wizard to Request a Certificate" on page 289.
servercertnickname
section.
section.
id="eeSSL"
section.
and specify
as the certificate type in the associated text
client
Configuring the Server's Security Preferences
parameter in the
servercertnickname
servercertnickname
Chapter 8
Administrative Basics
parameter
311
Advertisement
Table of Contents
