Chapter 13. Basic Subsystem Management
8. Close the Directory Server Console.
9. When the server is restarted, open the Directory Server Console for the internal database
instance.
The Login to Directory dialog box appears; the Distinguished Name field displays the Directory
Manager DN; enter the password.
The Directory Server Console for the internal database opens only if the correct password is
entered.
13.6. Searching the SQLite Database
RA administrators can query the SQLite database using a tool like sqlite3 from the command line.
To query the database:
1. Run the sqlite3 command, pointing to the RA's database files. For example:
sqlite3 /var/lib/pki-ra/conf/dbfile
When a connection is established to the database, the sqlite prompt opens.
sqlite>
2. You can now use standard sqlite commands to query the database, for example:
• To display all user information, use the following command:
sqlite> select * from users;
• To display all request information, use the following command:
sqlite> select * from requests;
• To display a list of available tables, use the following command:
sqlite> .tables
13.7. Viewing Security Domain Configuration
A security domain is a registry of PKI services. PKI services, such as CAs, register information about
themselves in these domains so users of PKI services can find other services by inspecting the
registry. The security domain service in Certificate System manages both the registration of PKI
services for Certificate System subsystems and a set of shared trust policies.
The security domain manages the trust relationships between subsystems automatically, so if a TPS,
TKS, and DRM are within the same security domain, they can communicate securely.
318
Need help?
Do you have a question about the CERTIFICATE SYSTEM 8.0 - ADMINISTRATION and is the answer not in the manual?