Red Hat CERTIFICATE SYSTEM 8 Install Manual page 96

Chapter 6. Cloning Subsystems
The keys for the master instance could have been exported to a .p12 file when the instance was
configured. Alternatively, the keys can be exported using the PKCS12Export command, as in
Section 6.2, "Exporting Keys from a Software
5. Make sure the PKCS#12 file is accessible by the Certificate System user. If necessary, change the
file permissions to pkiuser. For example:
chown pkiuser:pkiuser example.p12
6. Open the setup wizard URL, which was returned when the instance was created. For example:
http://server.example.com:11180/ocsp/admin/console/config/login?pin=IOjh7fIOjkld90k
7. In the Security Domain panel, add the clone to the same security domain to which the master
belongs.
8. The Subsystem Type panel sets whether to create a new instance or a clone; select the clone
radio button.
9. Give the path and filename of the PKCS #12 backup file which was saved when the master
instance was created or that were exported in 3.
If the keys are stored on an HSM that is accessible to the clone, then they are picked up
automatically.
86
Database".