Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION, Administration Manual

Page: 173 / 554

Using the End Users Services Interface
151
Procedure 5.8. Submitting a Server CSR
1. On the Services page on the RA, click
SSL End Users Services
.
2. Click
Server Enrollment
to display the Server Enrollment page, and then click
Request
Submission - Administrator
.
3. Enter the required details for the
Server ID
,
Site ID
and other fields, and then click
Submit
. This
sends the CSR to the RA.
4. When the RA has approved the request, the Server Administrator receives an email with details
about how to collect the certificate.
5.3.3.3. User Enrollment on an RA
Users access the User Enrollment page to submit a CSR to the RA. This page provides functionality
for requesting a new certificate and for renewing an existing certificate.
Procedure 5.9. Submitting a User CSR
1. On the Services page on the RA, click
SSL End Users Services
.
2. Click
User Enrollment
to display the User Enrollment page.
a. To submit a new CSR:
i. Click
Request Submission - User
.
ii. Enter the required details for the
UID
,
Site ID
and email address, and then click
Submit
.
This sends the CSR to the RA.
b. To submit a certificate renewal request:
i. Click
Renewal - User
.
ii. On the User Renewal Interface, click
Renewal
to submit the current certificate to the RA
for renewal.
3. When the RA has approved the request, the User receives an email with details about how to
collect the certificate.
5.3.3.4. Agent Enrollment on an RA
To become an RA Agent, you first need to obtain a certificate. This can potentially be any user
certificate capable of performing SSL client authentication. In other words, if the site decides that
the certificates enrolled from the "User Enrollment" is sufficient, then that certificate
can
be used for
agents.
The recommended (and default) practice, however, is to provide separate enrollment profiles on the
CA for these two distinct categories. The Agent Enrollment is obtained via the PIN Request followed
by the actual enrollment.
This section describes the procedures necessary to enroll as an RA Agent.