Cloning The Certificate Manager; Cloning Preparation - Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual

Cloning the Certificate Manager

• DNS round robin, a feature for managing network congestion that distributes load
across several different servers.
• Sticky SSL, which makes it possible for a user returning to the system to be routed the
same host they used previously.
Consult the documentation for the load balancer you intend to use with CS to read more
about the features, advantages, and configuration of a load balancer.
Cloning the Certificate Manager
Once you have installed the first Certificate Manager instance and configured it properly
(see "Cloning Preparation" below), you can create a clone of the first CA by following the
instructions in "Cloning the CA."

Cloning Preparation

Before you can create a clone, you must make sure that the instance you are cloning has
been properly installed and configured, since some of that configuration data is copied over
to the new instance. In particular you must verify the following aspects of the master CA:
The master CA must have been fully configured with the installation wizard. To review
1.
this configuration process for the master CA, see "Configuring the Certificate
Manager" on page 102. Also verify the following:
❍
❍
644 Red Hat Certificate System Administrator's Guide • September 2005
Check the master Certificate Manager's serial number range. The "Ending
certificate number" field must not be blank.
The serial number range of the cloned Certificate Manager must be unique, and
must not overlap with that of the master Certificate Manager.
Check the master Certificate Manager's request number range. The "Ending
request number" field must not be blank.
The request number range of the cloned Certificate Manager must be unique, and
must not overlap with that of the master Certificate Manager.