Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual page 91

Subsystems. Choose a subsystem you want to install.
7.
Select Certificate Manager.
Click Next to continue.
Remote Data Recovery Manager. Select the appropriate options:
8.
Select No if you don't want to connect the Certificate Manager to a remote Data
❍
Recovery Manager.
Select Yes if you have already installed a remote Data Recovery Manager that you
❍
want the Certificate Manager to use for archiving end users' encryption private
keys. Then, enter the remote Data Recovery Manager's host name, agent SSL port
number, and the Time-out in seconds in the associated fields.
Click Next to continue.
CA's serial number range. Specify range for the serial numbers for the certificates
9.
that this CA will issue. In the "Starting serial number" field, type the lowest serial
number the CA should assign to a certificate. If you only use one CA server, you can
leave the "Ending serial number" field blank to indicate no upper limit. If you plan to
clone the CA to distribute load, you must specify an upper limit. (For cloned CAs, you
must make sure that the range of serial numbers does not overlap with any other CA
server.)
Click Next to continue.
Internal OCSP Services. Select to enable the internal OCSP services.
10.
See "Setting Up a Certificate Manager with OCSP Service," on page 161 for more
information.
Network Configuration. Type the port numbers for the ports to be used by the CS
11.
instance.
See "Certificate Manager Interfaces," on page 83 for more information.
Click Next to continue.
CA Signing Certificate. Select the "Create subordinate CA certificate request" option.
12.
Click Next to continue.
Key-Pair Information for Certificate Manager CA signing certificate.
13.
Token. Enter either
❍
the name of an external token to store the Certificate Manager signing certificate
and key pair. If you have not previously initialized the token's password, you must
do so in this screen. See "Tokens," on page 84 for more information.
(if you plan to use the internal/software token) or
internal
Installing a Certificate Manager
Chapter 3 Certificate Manager 91