Installing A Certificate Manager As A Subordinate Ca - Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual

Installing a Certificate Manager
You now need to create the first agent user for the Certificate Manager. See "Agent
28.
Certificates," on page 324 for details.

Installing a Certificate Manager as a Subordinate CA

To install the Certificate Manager as a subordinate CA:
Log into Red Hat Console as the administrator, see "Red Hat Console" on page 237.
1.
The main window of Red Hat Console appears.
Select the CS instance and then either click Open, or double click this instance.
2.
The Installation Wizard launches.
Installation Wizard Introduction. Click Next to continue.
3.
Logon Token. Enter either
4.
or the name of an external token to store the Certificate Manager signing certificate and
key pair. If you have not previously initialized the token's password, you must do so in
this screen. See "Tokens," on page 84 for more information.
Internal Database. Choose to either create a new internal database for this instance or
5.
to use an existing Directory Server instance as the internal database for this instance.
Next, specify the information for that Directory Server instance. See "Internal
Database," on page 84 for more information.
Click Next to continue. The wizard sets up the new internal database, which takes some
time.
Click Next to continue.
Administrator. Type the user ID, name, and password for the CS administrator. This
6.
user ID will be set up as the administrator who can access the CS window and control
all CS settings.
Allow Multiple Roles for Users. Select if you want to allow users to belong to more
than one group, thus assuming more than one role. Deselect if you want to restrict users
from being able to belong to more than one role. This setting only applies to the default
administrator, agent, auditor, and trusted manager roles.
If you select this, allowing users to assume multiple roles, the administrator you set up
in this window will be added to the agents group. This administrator will be both an
administrator and an agent.
Click Next to continue.
90 Red Hat Certificate System Administrator's Guide • September 2005
(if you plan to use the internal/software token)
internal