Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual page 265

F0aW9uczngjhnMVQ2VydGlmaWNhdGUgQXV0aG9yaXR5MB4XDTk4MDgyNzE5MDAwMFoXDTk5MDIyMzE5MDA
wMnbjdgngYoxIDAeBgNVBAoTF05ldHNjYXBlIENvbW11bmljYXRpb25zMQ8wDQYDVQQLEwZQZW9wbGUxFz
AVBgoJkiaJkIsZAEBEwdzdXByaXlhMRcwFQYDVQQDEw5TdXByaXlhIFNoZXR0eTEjMCEGCSqGSIb3Dbndg
JARYUc3Vwcml5Yhvfggsvwryw4y7214vAOBgNVHQ8BAf8EBAMCBLAwFAYJYIZIAYb4QgEBAQHBAQDAgCAM
A0GCSqGSIb3DQEBBAUAA4GBAFi9FzyJlLmS+kzsue0kTXawbwamGdYql2w4hIBgdR+jWeLmD4CP4x
-----END NEW CERTIFICATE REQUEST-----
The wizard also copies the certificate request to a text file it creates in the configuration directory,
which is located at /var/lib/instance_id/conf/. The name of the text file depends on the type
of certificate requested. The possible text files are listed in
Signing Requests".
Filename
cacsr.txt
ocspcsr.txt
kracsr.txt
ocspcsr.txt
sslcsr.txt
othercsr.txt
Table 11.2. Files Created for Certificate Signing Requests
Do not modify the certificate request before sending it to the CA. The request can either be
submitted automatically through the wizard or copied to the clipboard and manually submitted to
the CA through its end-entities page.
NOTE
The wizard's auto-submission feature can submit requests to a remote Certificate
Manager only. It cannot be used for submitting the request to a third-party CA.
14. Submit the certificate request to a CA.
• Submit the request to a remote Certificate System CA through the wizard. See
"Submitting Certificate Requests through the
• Copy the request to the clipboard to submit the request through the CA enrollment forms. See
Section 11.2.2.2, "Submitting Certificate Requests through the End-Entities
• Submit the request to a third-party CA. See
to a Third-Party
NOTE
Requests created through a Certificate Manager Console are automatically submitted
to the CA without this step.
11.2.1.3. Requesting Certificates Using certutil
To request subsystem certificates using the certutil utility, do the following:
CA".
Table 11.2, "Files Created for Certificate
Certificate Signing Request
CA signing certificate
Certificate Manager OCSP signing certificate
DRM transport certificate
OCSP signing certificate
SSL server certificate
Other certificates, such as Certificate Manager
CRL signing certificate or SSL client certificate
Console".
Section 11.2.2.3, "Submitting a Certificate Request
Requesting Certificates
Section 11.2.2.1,
Page".
243