Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual page 79

NOTE
Before a profile can be edited, it must first be disabled by an agent.
1. Open the CA console.
pkiconsole https://server.example.com:9445/ca
2. In the Configuration tab, expand the Certificate Manager tree.
3. Click the Certificate Profiles item.
4. Click the Policies tab.
5. Select the Signing Alg policy, and click the Edit button.
6. To set the default signing algorithm, set the value in the Defaults tab. If this is set to -, then the
profile uses the CA's default.
7. To set a list of allowed signing algorithms which can be accepted in a certificate request, open the
Constraints tab, and set the list of algorithms in the Value field for signingAlgsAllowed.
Setting the Signing Algorithm Default in a Profile
57