To modify the configuration file directly:
Stop the CMS instance whose configuration file you want to edit (see
1.
"Stopping Certificate Management System" on page 310).
Open a terminal window.
2.
Go to this directory:
3.
Open the configuration file,
4.
Edit information in the file and save your changes.
5.
Restart Certificate Management System (see "Restarting Certificate
6.
Management System" on page 312).
Guidelines for Editing the Configuration File
The following guidelines may help you interpret the information in the
configuration file.
•
The format of the configuration file is as follows:
#comment
[parameter]=value
•
Comment lines, blank lines, unknown parameters, or misspelled parameters
are ignored by Certificate Management System. Comment lines begin with a
number sign (#). A line beginning with white space is considered a
continuation of the previous line.
•
The configuration file has many sections. Some sections contain parameters
specific to the subsystem that has been installed. Subsystem-specific
parameters are distinguished by a prefix identifying the subsystem:
for the Certificate Manager
ca
for the Registration Manager
ra
for the Data Recovery Manager
kra
for the Online Certificate Status Manager
ocsp
•
The parameter names and their values are strings. The parameter names can be
hierarchically structured with
ca.Policy.rule.RSAKeyRule.maxSize
level (such as
Policy
corresponding to its higher level (
<server_root>/cert-<instance_id>/config
, in a text editor.
CMS.cfg
notation with multiple levels—for example,
'.'
. The entries corresponding to a lower
in the example) can be requested from the configuration
in the example).
ca
Modifying the Configuration
Chapter 10
CMS Configuration
339