Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual page 174

Chapter 5. Registration Authority
Requesting a one-time PIN
The first step in becoming an RA Agent is for the user to apply for a PIN and have it approved by the
RA. This PIN is then used to apply for an Agent Certificate.
Procedure 5.10. To request a one-time PIN:
On the Certificate System Services page, click SSL End Users Services to display the RA
1.
Services page.
Click Agent Enrollment to display the Agent Enrollment page.
2.
Click PIN Creation Request to display the Agent Interface page.
3.
4. Enter an appropriate UID and email address.
Click Submit to send the PIN request to the RA. The request is assigned an ID that you can use
5.
for status checks and other referrals.
Approving the Request
The next step in becoming an RA Agent is for the RA to approve the PIN Request submitted by the
user.
Procedure 5.11. To approve the PIN request:
On the Certificate System Services page, click Agent Services to display the Agent Interface.
1.
Click List Requests. The PIN request should be listed in a table with a status of OPEN.
2.
Click the Request ID to display the details of the request.
3.
If required, you can add an explanatory note in the text box at the bottom of the screen. Click Add
4.
Note to save the note with the request.
Click Approve to approve the request. This generates the PIN that the new Agent requires to
5.
complete the Agent Enrollment.
Using the PIN to Apply for an Agent Certificate
After the RA has approved the PIN Request, the user must use the PIN to apply for Agent Enrollment
and to receive their Agent Certificate.
Procedure 5.12. To apply for an agent certificate:
On the Certificate System Services page, click SSL End Users Services to display the RA
1.
Services page.
Click Request Status Check to display the Request Status page.
2.
In the Request ID field, enter the ID of the PIN request. If the RA has approved the PIN request,
3.
the value of the Status field should be APPROVED.
Click the value in the Import Certificate field to display the one-time PIN. You can now use the
4.
PIN to enroll for an Agent Certificate.
152