System Architecture - Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual

System Architecture

files from the original Certificate Manager to the new Certificate Manager
( directory). If these databases are present, the Configuration
<server_root>/alias
Wizard will recognize that you are creating a clone and confirm that you want to reuse the
CA's signing key and certificate (if the clone is on the same server, you can also reuse the
SSL server certificate).
If you store the CA key material on a hardware token, you will have to follow the hardware
vendor's instructions for copying the key material to a hardware device accessible to the
clone.
A cloned Certificate Manager will have all the same features, for example, agent gateway
functions and end entity gateway functions, that a normal Certificate Manager has. You can
then configure Registration Managers that point to different Certificate Manager servers but
that appear to be serviced by the same CA.
System Architecture
This section describes the architecture of CS. Figure 1-5 on page 56 shows a graphical
representation of that architecture.
Chapter 1 Overview 55