Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual page 143

Figure 4.1. The General Settings Tab
3. The General Setting tab of the Certificate Manager tab contains the following fields:
• Override validity nesting requirement. This checkbox sets whether the Certificate Manager
can issue certificates with validity periods longer than the CA signing certificate validity period.
If this checkbox is not selected and the CA receives a request with validity period longer than
the CA signing certificate's validity period, it automatically truncates the validity period to end on
the day the CA signing certificate expires.
• Certificate Serial Number. These fields set the serial number range for certificates issued by
the Certificate Manager. The server assigns the serial number in the Next serial number field to
the next certificate it issues and the number in the Ending serial number to the last certificate it
issues.
NOTE
The serial number range cannot be updated manually through the console if the CA
is a not clone or serial management has not been manually enabled, so the serial
number ranges are read-only fields. If cloning or serial number management is not
enabled, then the serial number range can be updated by editing the values in the
CS.cfg file.
dbs.beginSerialNumber=1
dbs.enableSerialManagement=true
dbs.endReplicaNumber=100
dbs.endRequestNumber=10000000
dbs.endSerialNumber=10000000
Changing the Rules for Issuing Certificates
121