Table of Contents
Advertisement
3.2.2. Installing from an ISO Image
Red Hat Certificate System 8.0 can also be downloaded from Red Hat Network as an ISO image. This
ISO image contains an RPMS/ directory which can be used as a local yum repository.
1. Open the Red Hat Certificate System 8.0 Red Hat Network channel and download the ISO
image.
2. Place that RPMS/ directory on a web server and then configure yum to use that location as a
repository.
3. Install Certificate System as described in
any environment variables, HSMs, or IPv6 settings.
3.3. Configuring a CA
The CA is always the first subsystem to be configured; every other subsystem depends on the CA
for its configuration. The CA, along with setting up the CA hierarchy for the PKI, issues certificates
which every subsystem uses to function and sets up a security domain which establishes trusted
relationships between subsystems.
NOTE
If a CA has an ECC signing certificate, it can issue both RSA and ECC client certificates.
To enable ECC for the CA, load an ECC module first (described in
a CA with ECC
Subsystem configuration is done by accessing a unique web-based configuration page for the
instance. The only supported web browser for subsystem configuration is Mozilla Firefox.
1. Install the subsystem packages. For example:
yum install pki-ca
Once the packages are installed, then the installer automatically launches the pkicreate script
to create the default subsystem instance automatically. A URL to access the new instance is
printed to the screen which gives the subsystem instances hostname, port, and a login PIN to
access the configuration wizard.
http://server.example.com:9180/ca/admin/console/config/login?pin=
2. Open the configuration wizard using the URL returned from the package installation.
Alternatively, log into the setup wizard through admin link on the services page and supply the
preop.pin value from the /var/lib/pki-ca/conf/CS.cfg file when prompted.
https://server.example.com:9444/ca/services
3. Create a new security domain.
Section 3.2.1, "Installing through
Enabled") and then configure the CA.
Installing from an ISO Image
yum", including setting
Section 4.2, "Installing
27
Advertisement
Table of Contents
