Red Hat CERTIFICATE SYSTEM 8 Install Manual page 101

ca.certStatusUpdateInterval=0
• Disable monitoring database replication changes:
ca.listenToCloneModifications=false
• Disable maintenance of the CRL cache:
ca.crl.IssuingPointId.enableCRLCache=false
• Disable CRL generation:
ca.crl.IssuingPointId.enableCRLUpdates=false
• Set the CA to redirect CRL requests to the new master:
master.ca.agent.host=new_master_hostname
master.ca.agent.port=new_master_port
4. Stop the cloned CA server.
service subsystem_name stop
5. Open the cloned CA's configuration directory.
cd /etc/subsystem_name
6. Edit the CS.cfg file to configure the clone as the new master.
a. Delete each line which begins with the ca.crl. prefix.
b. Copy each line beginning with the ca.crl. prefix from the former master CA CS.cfg file into
the cloned CA's CS.cfg file.
c. Enable control of the database maintenance thread; the default value for a master CA is 600.
ca.certStatusUpdateInterval=600
d. Enable monitoring database replication:
ca.listenToCloneModifications=true
e. Enable maintenance of the CRL cache:
ca.crl.IssuingPointId.enableCRLCache=true
f. Enable CRL generation:
Converting CA Clones and Masters
91