Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE, Administration Manual

Page: 57 / 512

CA Information Panel
37
For a CA, there are two possible configuration options:
•
Root CA.
A root CA signs its own CA signing certificate and, therefore, can set its own certificate
issuance rules.
•
Subordinate CA.
A subordinate CA receives its CA signing certificate from a root CA. The root CA
must be referenced here; it can be another Certificate System CA, but, for the default (i.e., first) CA
instance, this will probably be an external root CA. The certificate requests generated in this process
must be submitted to the external CA and be approved before configuration can be completed.
2.4.4. CA Information Panel
This panel appears only during TPS configuration. This identifies the CA which will work with the TPS
to issue and revoke certificates stored on the smart card. The TPS must be associated with a CA
within the security domain which can perform the token operations; the CA is selected from a drop-
down list of all CAs within the domain.
Figure 2.5. Selecting the CA
2.4.5. TKS Information Panel
This panel is only available when configuring a TPS subsystem. The TPS must be associated with an
existing TKS subsystem. Similarly to setting the CA information, the TKS is selected from a list of all
configured TKS subsystems within the security domain.