Creating Online Certificate Status Manager Agents And Administrators - Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual

Configuration
Managing the access control lists (ACLs) for user
authorization.
Requesting and installing certificates and
managing tokens.
Installing a certificate chain in the database to
provide the chain of CAs to a trusted CA.
Managing tokens.
Changing the subsystem security settings.
Changing subsystem passwords
Configuring the internal OCSP service.
Setting up CRLs and revoking certificates.
Configuring cloning.
Table 6.1. General Subsystem Configuration Links
6.5. Creating Online Certificate Status Manager Agents and
Administrators
When the subsystem is configured, there is a default user created with both administrator and agent
privileges. This user can perform both administrator and agent operations and access the Console and
the agent services page.
To create additional administrator, agent, or auditor users, create a user in the Certificate System
instance where the user will have privileges and assign the user to the appropriate group. An agent
or auditor must have a certificate stored in the subsystem's internal database. If the Console is
configured for SSL client authentication, all administrators must also a certificate.
To create a new user entry, do the following:
1. Log into the administrative console.
pkiconsole https://server.example.com:9443/ca
2. In the Configuration tab, select Users and Groups. Click Add.
3. Fill in the information in the Edit User Information dialog.

Creating Online Certificate Status Manager Agents and Administrators

Section
Section 17.6, "Authorization for Certificate
System Users"
Section 11.2, "Requesting and Receiving
•
Certificates"
Section 11.4.1, "Installing Certificates in the
•
Certificate System Database"
Section 11.4.1.3, "About CA Certificate Chains"
Section 12.1, "Tokens for Storing Certificate
System Keys and Certificates"
Section 11.5, "Configuring the Server Certificate
Use Preferences"
Section 3.3, "System Passwords"
Chapter 6, Online Certificate Status Protocol
Responder
Chapter 14, Revocation and CRLs
Chapter 20, Configuring the Certificate System
for High Availability
161