Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE, Administration Manual

Page: 54 / 512

Chapter 2. Installation and Configuration
34
• Subsystem certificate
• TPS
• SSL server certificate
• Subsystem certificate
2.4. Configuration Setup Wizard
When the installation process is complete, either when installing the initial subsystems or running the
pkicreate
tool, the script returns a URL pointing to the configuration page of the new subsystem.
This HTML configuration wizard is used to configure the subsystem settings like the instance name
and security domain, to request and generate keys and certificates, and to configure which Directory
Server to use.
This section describes the configuration wizard panels. The panels shown are slightly different for
configuring the different subsystems or when configuring a clone.
•
Section 2.4.1, “Security Domain Panel”
•
Section 2.4.2, “Subsystem Type Panel”
•
Section 2.4.3, “PKI Hierarchy Panel”
•
Section 2.4.4, “CA Information Panel”
•
Section 2.4.5, “TKS Information Panel”
•
Section 2.4.6, “DRM Information Panel”
•
Section 2.4.7, “Authentication Directory Panel”
•
Section 2.4.8, “Internal Database Panel”
•
Section 2.4.9, “Key Store Panel”
•
Section 2.4.10, “Key Pairs Panel”
•
Section 2.4.11, “Subject Names Panel”
•
Section 2.4.12, “Requests and Certificates Panel”
•
Section 2.4.13, “Export Keys and Certificates Panel”
•
Section 2.4.14, “Administrator Panel”
2.4.1. Security Domain Panel
This panel creates a new security domain or adds the new subsystem to an existing security
domain. A security domain can be created only if the subsystem being configured is a CA. All
other subsystems do not have the option to create a domain, so these subsystems must join an
existing security domain. Creating a new domain creates a registry called
domain.xml
in the
/var/
lib/
CAinstanceID
/conf/
directory. Editing the file manually is not recommended.