Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE, Administration Manual

Page: 73 / 512

Cloning a Subsystem
53
3. Open the new instance URL, and go through the configuration wizard as described in
Section 2.6,
“Configuring the Default Subsystem Instances”
. Supply the security domain, CA, instance ID,
internal LDAP database, and agent information.
4. When the configuration is complete, restart the subsystem.
/etc/init.d/ instance_ID restart
2.7.1. Cloning a Subsystem
For failover protection and for availability for high-traffic subsystems, it is possible to clone an existing
CA, DRM, TKS, or OCSP subsystem. To clone a subsystem, do the following:
1. Create a new instance using
pkicreate
.
2. Open the configuration wizard.
3. In the
Security Domain
panel, add the clone to the same security domain to which the master
belongs.
4. The
Subsystem Type
panel sets whether to create a new instance or a clone; select the clone
radio button.
Figure 2.16. Selecting the Subsystem to Clone
5. Give the path and filename of the PKCS #12 backup file which was saved when the master
instance was created. If a backup was not created at that time, use the
pk12util
utility to create
a PKCS #12 file.