Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual page 10

Admin Guide
16.1.7. Using an HSM to Store Subsystem Certificates ...................................... 393
16.2. Requesting a Subsystem, Server, or Signing Certificate through the Console ....... 394
16.3. Renewing Subsystem Certificates .................................................................... 405
16.4. Using Cross-Pair Certificates ........................................................................... 406
16.4.1. Installing Cross-Pair Certificates ............................................................ 407
16.4.2. Searching for Cross-Pair Certificates ..................................................... 407
16.5. Managing the Certificate Database .................................................................. 407
16.5.1. Installing Certificates in the Certificate System Database ........................ 407
16.5.2. Viewing Database Content .................................................................... 410
16.5.3. Deleting Certificates from the Database ................................................. 412
16.6. Changing the Trust Settings of a CA Certificate ................................................ 413
16.6.1. Changing Trust Settings through the Console ........................................ 413
16.6.2. Changing Trust Settings Using certutil ................................................... 414
16.7. Managing Tokens Used by the Subsystems ...................................................... 414
16.7.1. Detecting Tokens ................................................................................. 415
16.7.2. Viewing Tokens .................................................................................... 415
16.7.3. Changing a Token's Password .............................................................. 415
IV. References
A. Certificate Profile Input and Output Reference
A.1. Input Reference ............................................................................................... 419
A.1.1. Certificate Request Input ........................................................................ 419
A.1.2. CMC Certificate Request Input ............................................................... 419
A.1.3. Dual Key Generation Input ..................................................................... 419
A.1.4. File-Signing Input .................................................................................. 420
A.1.5. Image Input ........................................................................................... 420
A.1.6. Key Generation Input ............................................................................. 420
A.1.7. nsHKeyCertRequest (Token Key) Input ................................................... 420
A.1.8. nsNKeyCertRequest (Token User Key) Input ........................................... 420
A.1.9. Serial Number Renewal Input ................................................................. 421
A.1.10. Subject DN Input ................................................................................. 421
A.1.11. Subject Name Input ............................................................................. 421
A.1.12. Submitter Information Input .................................................................. 421
A.2. Output Reference ............................................................................................. 421
A.2.1. Certificate Output .................................................................................. 421
A.2.2. PKCS #7 Output ................................................................................... 422
A.2.3. CMMF Output ....................................................................................... 422
B. Defaults, Constraints, and Extensions for Certificates and CRLs
B.1. Defaults Reference ........................................................................................... 423
B.1.1. Authority Info Access Extension Default .................................................. 423
B.1.2. Authority Key Identifier Extension Default ................................................ 425
B.1.3. Basic Constraints Extension Default ....................................................... 425
B.1.4. CRL Distribution Points Extension Default ............................................... 426
B.1.5. Extended Key Usage Extension Default .................................................. 429
B.1.6. Freshest CRL Extension Default ............................................................. 430
B.1.7. Issuer Alternative Name Extension Default .............................................. 433
B.1.8. Key Usage Extension Default ................................................................. 434
B.1.9. Name Constraints Extension Default ....................................................... 435
B.1.10. Netscape Certificate Type Extension Default .......................................... 440
B.1.11. Netscape Comment Extension Default .................................................. 440
x
417
419
423