Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual page 67

Profile ID
caRARouterCert
caRAserverCert
caRouterCert
caServerCert
caSignedLogCert
caSimpleCMCUserCert
caSSLClientSelfRenewal
Profile Name
RA Agent-Authenticated Router
Certificate Enrollment
RA Agent-Authenticated Server
Certificate Enrollment
One Time Pin Router Certificate
Enrollment
Manual Server Certificate
Enrollment
Manual Log Signing Certificate
Enrollment
Simple CMC Enrollment
Self-renew user SSL client
certificates
List of Certificate Profiles
Description
Enrolls router certificates after
agent approval (as opposed to
automatic enrollment).
Enrolls server certificates with
RA agent authentication.
Enrolls router certificates
using an automatically-
generated, one-time PIN that
the router can use to retrieve its
certificate.
Enrolls server certificates.
Enrolls audit log signing
certificates.
Enrolls user certificates by
using the CMC certificate
request with CMC Signature
authentication.
Renews SSL client certificates
using certificate-based
authentication. The certificate is
issued as soon as the request
is authenticated and authorized
by presenting the original
certificate.
NOTE
Renewal profiles
can only be used
in conjunction with
the profile that
issued the original
certificate. There
are two settings
that are beneficial:
• It is important
the the original
enrollment profile
name does not
change.
• The Renew
Grace Period
Constraint
should be set
in the original
45