Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual page 93

For more information about extensions, see Appendix G, "Certificate and CRL
Extensions."
Click Next to continue.
Certificate Manager CA Signing Certificate Creation. This is an informational
18.
screen that tells you that the wizard has all the information required to generate the key
pair and certificate request. In the previous screen, if you chose to include the Subject
Key Identifier extension in the certificate, you'll be given the choice to select the
format for the certificate request. Otherwise, the request format will be PKCS #10.
If you want the wizard to generate the certificate request in PKCS #10 format,
❍
select the "Generate PKCS10 request" option.
If you want the wizard to generate the certificate request in CMC format, select the
❍
"Generate CMC full enrollment request" option.
Click Next to generate the request. The wizard creates a certificate request that you
must submit to another CA.
Submission of Request. Select whether you want to submit the request manually or
19.
send the request to a remote Certificate Manager automatically.
To automatically submit the request to a remote Certificate Manager (or for
❍
automatic enrollment), follow these steps:
Select the "Send the request to a remote CS now" option.
I.
Enter the host name and end-entity port number of the remote Certificate
II.
Manager, and select whether this end-entity port is SSL enabled.
Click Next to submit the request.
III.
The Certificate Request Result screen appears, confirming that the request has
been submitted. Note the request ID provided in the response message. (You
can use it later to retrieve the certificate, once it has been issued, from the
end-entity port.)
Note that the request you submitted gets added to the agent queue of the
remote Certificate Manager for approval by that Certificate Manager's agent.
If you've permission to access that Certificate Manager's Agent interface, you
can follow the instructions below to issue the certificate. Otherwise, you
should wait for the other agent to approve your request and issue the
certificate.
Open a web browser window.
IV.
Enter the URL for the remote Certificate Manager's Agent Services page.
V.
(You must have a valid agent's certificate.)
Installing a Certificate Manager
Chapter 3 Certificate Manager 93