Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual page 402

Chapter 15. Configuring Subsystem Logs
Audit logging is enabled by default when the TPS is configured, but signed audit logging is not. Signed
audit logging can be enabled in the admin services page by setting the Enable Audit Log Signing
radio button to Enable.
The TPS HTML services page is https://server.example.com:7889/tus/.
1. Stop the TPS instance.
service pki-tps stop
2. Edit the audit logging configuration. The log file parameters are listed in
Audit Log Parameters", and the auditable events are listed in
TPS Audit Log".
logging.audit.enable=true
logging.audit.filename=/var/log/pki-tps/tps-audit.log
logging.audit.level=10
380
Table 15.10, "TPS Signed
Table 15.11, "Events Recorded to the