Novell LINUX ENTERPRISE SERVER 11 - SECURITY Manual page 219

default value leads to an error message. To avoid this, enter a permissible value
for the period of validity.
Do the following:
1 Start YaST and open the CA module.
2 Select the required root CA and click Enter CA.
3 Enter the password if you entered a CA the first time. YaST displays the CA key
information in the tab Description (see
Figure 17.2 YaST CA Module—Using a CA
4 Click Advanced and select Create SubCA. This opens the same dialog as for
creating a root CA.
5 Proceed as described in
It is possible to use one password for all your CAs. Enable Use CA Password as
Certificate Password to give your sub-CAs the same password as your root CA.
This helps to reduce the amount of passwords for your CAs.
Figure 17.2
Section 17.2.1, "Creating a Root CA"
).
(page 202).
Managing X.509 Certification 205