Configuring An Ra - Red Hat CERTIFICATE SYSTEM 8 Install Manual

Chapter 3. Installation and Configuration
service pki-ca restart
IMPORTANT
The new instance is not active until it is restarted, and weird behaviors can occur if
you try to use the instance without restarting it first.

3.4. Configuring an RA

Subsystem configuration is done by accessing a unique web-based configuration page for the
instance. The only supported web browser for subsystem configuration is Mozilla Firefox.
IMPORTANT
Before any RA can be set up, a Certificate System CA must be installed, configured, and
running. This subsystem depends on the CA to issue their certificates and to create a
security domain. If the security domain CA is not available, then the configuration process
fails.
1. Install the subsystem packages. For example:
yum install pki-ra
Once the packages are installed, then the installer automatically launches the pkicreate script
to create the default subsystem instance automatically. A URL to access the new instance is
printed to the screen which gives the subsystem instances hostname, port, and a login PIN to
access the configuration wizard.
https://server.example.com:12889//ra/admin/console/config/login?pin=kI7E1MByNIUcPJ6RKHmH
2. Open the configuration wizard using the URL returned by the package installation.
https://server.example.com:12889//ra/admin/console/config/login?pin=kI7E1MByNIUcPJ6RKHmH
Alternatively, log into the setup wizard through admin link on the services page and supply the
preop.pin value from the /var/lib/pki-ra/conf/CS.cfg file when prompted.
https://server.example.com:12889/services
3. Join an existing security domain by entering the CA information. This URL can be identified by
running service pki-ca status on the CA's host; the security domain URL is returned with
the other configuration settings. For example:
https://server.example.com:9445
When the CA is successfully contacted, then supply the admin username and password for the CA
so that it can be properly accessed.
36