Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual page 66

Chapter 2. Making Rules for Issuing Certificates
Profile ID
caOCSPCert
caOtherCert
caRAagentCert
caRACert
44
Profile Name
Manual OCSP Manager
Signing Certificate Enrollment
Other Certificate Enrollment
RA Agent-Authenticated Agent
User Certificate Enrollment
Manual Registration Manager
Signing Certificate Enrollment
Description
NOTE
Renewal profiles
can only be used
in conjunction with
the profile that
issued the original
certificate. There
are two settings
that are beneficial:
• It is important
the the original
enrollment profile
name does not
change.
• The Renew
Grace Period
Constraint
should be set
in the original
enrollment
profile. This
defines the
amount of time
before and after
the certificate's
expiration date
when the user is
allowed to renew
the certificate.
There are only
a few examples
of these in the
default profiles,
and they are
mostly not
enabled by
default.
Enrolls OCSP Manager
certificates.
Enrolls other certificates.
Enrolls RA agent user
certificates with RA agent
authentication.
Enrolls Registration Manager
certificates.