About The Certificate Manager (Ca) - Red Hat CERTIFICATE SYSTEM 8 - DEPLOYMENT Deployment Manual

Chapter 2. Overview of Red Hat Certificate System Subsystems

2.1.1. About the Certificate Manager (CA)

As stated, the Certificate Manager is the heart of the Certificate System. It manages certificates
at every stage, from requests through enrollment (issuing), renewal, and revocation. The CA also
publishes certificates and lists of revoked certificates for use by clients like the OCSP or web servers.
2.1.1.1. Issuing Certificates (Enrollment)
An end entity enrolls in the PKI by submitting an enrollment request through the end-entity interface.
There can be many kinds of enrollment that use different enrollment methods or require different
authentication methods. For each enrollment, there is a separate enrollment page created that is
specific to the type of enrollment, type of authentication, and the certificate profiles associated with
the type of certificate. The forms associated with enrollment can be customized for both appearance
and content. Alternatively, the enrollment process can be customized by creating certificate profiles
for each enrollment type. Certificate profiles dynamically-generate forms which are customized by
configuring the inputs associated with the certificate profile.
24