Converting a Cloned CA into a Master CA
Chapter
16
Configuring CMS for High Availability
683
2.
Stop this online cloned CA server by issuing the following command in that
directory:
./stop-cert
3.
Go to this cloned CA’s configuration directory at the command line:
cd <serverRoot>/cert-<cloneID>/config
4.
Open the CMS.cfg file for editing, and make the following changes:
a.
Delete each line of configuration data from this cloned CA’s configuration
file called
<serverRoot>/cert-<cloneID>/config/CMS.cfg
which
begins with the ca.crl. prefix:
ca.crl.*
b.
Copy the configuration data from the existing offline master CA to this
cloned CA by opening the file called
<serverRoot>/cert-<masterID>/config/CMS.cfg a
nd copying each
line beginning with the ca.crl. prefix into this selected cloned CA’s
<serverRoot>/cert-<cloneID>/config/CMS.cfg
file:
ca.crl.*
c.
To enable control of the database maintenance thread, modify the
following line changing the value "0" to "600" (600 is the default value for
the master CMS. This value can be changed to any other non-zero
number):
ca.certStatusUpdateInterval=600
d.
To enable monitoring database replication changes, modify the following
line changing "false" to "true":
ca.listenToCloneModifications=true
e.
To enable maintenance of the CRL cache, modify all of the
"enableCRLCache" lines changing "false" to "true":
ca.crl.<IssuingPointId>.enableCRLCache=true
f.
To enable CRL generation, modify all of the "enableCRLUpdates" lines
changin "false" to "true":
ca.crl.<IssuingPointId>.enableCRLUpdates=true
Summary of Contents for Certificate Management System 6.2
Page 1: ...Administrator s Guide Netscape Certificate Management System Version6 2 June 2003...
Page 22: ...22 Netscape Certificate Management System Administrator s Guide June 2003...
Page 30: ...Documentation 30 Netscape Certificate Management System Administrator s Guide June 2003...
Page 84: ...Uninstalling CMS 84 Netscape Certificate Management System Administrator s Guide June 2003...
Page 380: ...ACL Reference 380 Netscape Certificate Management System Administrator s Guide June 2003...
Page 750: ...Object Identifiers 750 Netscape Certificate Management System Administrator s Guide June 2003...
Page 828: ...Managing Certificates 828 Netscape Certificate Manager System Administrator s Guide June 2003...
Page 844: ...The SSL Handshake 844 Netscape Certificate Manager System Administrator s Guide June 2003...
Page 862: ...862 Netscape Certificate Management System Administrator s Guide June 2003...