Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual page 173

Procedure 5.8. Submitting a Server CSR
On the Services page on the RA, click SSL End Users Services.
1.
Click Server Enrollment to display the Server Enrollment page, and then click Request
2.
Submission - Administrator.
Enter the required details for the Server ID, Site ID and other fields, and then click Submit. This
3.
sends the CSR to the RA.
4. When the RA has approved the request, the Server Administrator receives an email with details
about how to collect the certificate.
5.3.3.3. User Enrollment on an RA
Users access the User Enrollment page to submit a CSR to the RA. This page provides functionality
for requesting a new certificate and for renewing an existing certificate.
Procedure 5.9. Submitting a User CSR
On the Services page on the RA, click SSL End Users Services.
1.
Click User Enrollment to display the User Enrollment page.
2.
a. To submit a new CSR:
Click Request Submission - User.
i.
Enter the required details for the UID, Site ID and email address, and then click Submit.
ii.
This sends the CSR to the RA.
b. To submit a certificate renewal request:
Click Renewal - User.
i.
On the User Renewal Interface, click Renewal to submit the current certificate to the RA
ii.
for renewal.
3. When the RA has approved the request, the User receives an email with details about how to
collect the certificate.
5.3.3.4. Agent Enrollment on an RA
To become an RA Agent, you first need to obtain a certificate. This can potentially be any user
certificate capable of performing SSL client authentication. In other words, if the site decides that
the certificates enrolled from the "User Enrollment" is sufficient, then that certificate can be used for
agents.
The recommended (and default) practice, however, is to provide separate enrollment profiles on the
CA for these two distinct categories. The Agent Enrollment is obtained via the PIN Request followed
by the actual enrollment.
This section describes the procedures necessary to enroll as an RA Agent.
Using the End Users Services Interface
151