Release Notes
2
3.1. Obtaining Packages ..................................................................................................... 6
3.2. Installation Notes .......................................................................................................... 6
3.3. Required JRE and JDK ................................................................................................ 7
3.4. TPS Subsystem Considerations .................................................................................... 9
3.5. Directory Server Information ........................................................................................ 10
3.6. Source RPMs ............................................................................................................. 10
4. Known Issues ....................................................................................................................... 10
4.1. Reconfiguring the Red Hat Certificate System Subsystems to Prevent a Potential TLS-
Related Man-in-the-Middle Attack ....................................................................................... 10
4.2. Manually Adding a New Port to the RA ....................................................................... 15
4.3. Viewing Enterprise Security Client Diagnostics Logs ..................................................... 16
4.4. Other Known Issues ................................................................................................... 17
5. Documentation ...................................................................................................................... 19
6. Copyright and Third-Party Acknowledgments ......................................................................... 19
7. Document History ................................................................................................................. 23
These release notes contain important information available at the time of release for Red Hat
Certificate System 7.3. New features, system requirements, installation notes, known problems,
resources, and other current issues are addressed here. Read this document before beginning to use
Red Hat Certificate System.
1. New Features in Red Hat Certificate System 7.3
1.1. Registration Authority
Red Hat Certificate System 7.3 supports a stand-alone Registration Authority (RA), which supports the
automatic issue of certificates to devices and servers.
The RA subsystem is a front-end subsystem to the Certificate Authority (CA), and it performs local
authentication, requestor information gathering and request validation. It is responsibile for fowarding
requests to the CA for signing.
The RA can be configured to authenticate incoming requests, or to route the request to appropriate
personnel for approval before forwarding the request to the CA for certificate creation. The RA is
typically set up outside of the firewall, while the CA is behind the firewall.
1.1.1. Enrollment Types
The RA currently provides the following enrollment types:
• SCEP enrollment
• Server certificate enrollment
• User certificate enrollment and renewal
• RA Agent enrollment
The RA also supports:
• Status checks of Certificate Requests
• Certificate retrieval
Summary of Contents for CERTIFICATE 7.3 RELEASE NOTES
Page 24: ...24 ...
