Red Hat CERTIFICATE SYSTEM 8 Install Manual page 73

9. Click the Step 1: Copy the certificate request link, and copy the certificate request to a file or the
clipboard.
10. Submit the request to the external CA. Leave the browser with the configuration wizard open as
you wait for the certificates to be generated, so that it is easier to pick up the process.
11. Click Step 2, and import the certificate chain for the issuing CA. This certificate chain must not
contain the leaf certificate (the certificate being requested).
12. After retrieving the issued certificates, click the Step 3: Paste in the base 64-encoded certificate
link, and paste in the new certificate (this should be only the new certificate, not a certificate
chain).
13. For the CA, this only has to be done for the signing certificate. For the other subsystems, repeat
steps 9, 10, and 12
When all the certificates have been submitted, click Next to resume the configuration process.
14. Export the keys for the certificates, if the subsystem will be cloned.
15. Create the administrator user.
16. When the configuration is done, restart the subsystem.
for each certificate.
Requesting Subsystem Certificates from an External CA
63