Silently Configuring Subsystem - Red Hat CERTIFICATE SYSTEM 8 Install Manual

Parameter
ldap_auth_host
ldap_auth_port
ldap_auth_base_dn
External CA for Issuing Certificates
external
ext_csr_file
ext_ca_cert_file
ext_ca_cert_chain_file
Cloning Configuration
clone
clone_p12_file
clone_p12_password
Table 7.1. Parameters for pkisilent

7.2. Silently Configuring Subsystem

NOTE
Before running pkisilent, first run pkicreate to create the instance.
There are slight differences in the options used to configure the different subsystem types:
• Different security domain settings. A CA can host a security domain, so it has special configuration
options to create a security domain. All other subsystems (as well as CAs) must join an existing
security domain.
Silently Configuring Subsystem
Description
Gives the hostname of the LDAP directory
database to use for the TPS subsystem token
database. Only for the TPS subsystem.
Gives the port number of the LDAP directory
database to use for the TPS subsystem token
database. Only for the TPS subsystem.
Gives the base DN in the LDAP directory tree of
the TPS token database under which to create
token entries. Only for the TPS subsystem.
Sets whether to submit the subsystem
certificates to the configured CA or to an external
CA. The options are true or false. If this is not
set, then the default is false.
The output file to which to write the generated
certificate requests for the subsystem
certificates. Step one of the silent configuration
process.
The input file for the certificates issued by the
external CA. Step two of the silent configuration
process.
The input file for the CA certificate chain for the
external CA issuing the certificate. Step two of
the silent configuration process.
Sets whether the new instance is a clone. Its
possible values are true or false. If this is not
set, then the default is false.
The path and file name of the PKCS#12 file for
the backed-up keys for the original instance.
The password to access the PKCS#12 file.
99