Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual page 399

2. In the navigation tree of the Configuration tab, select Log.
3. In the Log Event Listener Management tab, select the SignedAudit entry.
4. Click Edit/View.
5. There are three fields which must be reset in the Log Event Listener Editor window.
• Fill in the signedAuditCertNickname. This is the nickname of the certificate used to sign audit
logs. An audit signing certificate is created when the subsystem is configured; it has a nickname
like auditSigningCert cert-pki-ca.
Configuring a Signed Audit Log for a CA, OCSP, DRM, or TKS
377