Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual page 98

Installing a Certificate Manager
❍
❍
Click Next to generate the certificate or the request:
❍
❍
Submission of Request. Select whether you want to submit the request manually or
30.
send the request automatically to a remote Certificate Manager.
❍
98 Red Hat Certificate System Administrator's Guide • September 2005
If you want the wizard to generate the certificate request in PKCS #10 format,
select the "Generate PKCS10 request" option.
If you want the wizard to generate the certificate request in CMC format, select the
"Generate CMC full enrollment request" option.
If you chose to get the certificate signed by the subordinate CA itself, the wizard
generates the SSL server certificate. You'll be presented with the "Create Single
Sign-on Password" screen (Step 35).
If you chose to generate a request for submission to another CA, the wizard
generates an SSL server certificate request that you must submit to another CA.
You'll be presented with the "Submission of Request" screen (Step 30).
To automatically submit the request to a remote Certificate Manager (or for
automatic enrollment), follow these steps:
Select the "Send the request to a remote CS now" option.
I.
Enter the host name and end-entity port number of the remote Certificate
II.
Manager, and specify whether the end-entity port is SSL enabled.
Click Next to submit the request.
III.
The Certificate Request Result screen appears, confirming that the request has
been submitted. Note the request ID provided in the response message. (You
can use it later to retrieve the certificate, once it has been issued, from the
end-entity port.)
Note that the request gets added to the agent queue of the remote Certificate
Manager for approval by that Certificate Manager's agent. If you've
permission to access that Certificate Manager's Agent interface, you can
follow the instructions below to issue the certificate. Otherwise, you should
wait for the remote Certificate Manager's agent to approve your request and
issue the certificate.
Open a web browser window.
IV.
Enter the URL for the remote Certificate Manager's Agent Services page.
V.
(You must have a valid agent's certificate.)
Select List Requests, click Show Pending Requests, and then click Find.
VI.