Required Information For Subsystem Configuration - Red Hat CERTIFICATE SYSTEM 8 Install Manual

RPMs for NSS and NSPR
nspr
nss
svrcore

2.4. Required Information for Subsystem Configuration

When the Certificate System subsystems are configured, some outside information must be available,
Table 2.2, "Required Information for Configuring
as listed in
Information
Login PIN
Security domain information
CA information
Subsystem information (for TPS configuration)
Directory Server hostname and port number
Directory Manager DN and password
Required Information for Subsystem Configuration
Subsystems".
Description
There is a randomly-generated PIN in the
preop.pin parameter in the CS.cfg file in the
instance conf/ directory. This is used to log into
the configuration wizard.
CAs can create a new security domain, which
requires a unique name and a username and
password for the CA agent who administers
the domain. All other subsystems must join an
existing security name. Have the username and
password of the CA agent who administers the
domain.
If the subsystem is not a CA, then it is necessary
to select a CA from a drop-down menu or add
an external CA. If a Certificate System CA is
selected, then supply the CA agent username
and password.
When installing a TPS, you must have already
configured the other subsystem and have their
bind information available:
The CA
The TKS (required)
The DRM (optional, for server-side key
generation)
When configuring the TPS, the TKS and DRM to
connect with the TPS are selected from a drop-
down list of all subsystems within the security
domain.
The Certificate System uses the user database
of the Directory Server to store its information,
and the hostname and port number of the LDAP
directory is required for the Certificate System to
access the database.
The Certificate System must be able to bind to
the user database, so a user ID and password
must be supplied to bind to the Directory Server.
This user is normally the Directory Manager. The
15