Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION, Administration Manual

Page: 83 / 554

Chapter 3.
61
Administrative Basics
This chapter discusses the Certificate System administrative console, the configuration files, and other
basic administrative tasks such as starting and stopping the server, managing logs, changing port
assignments, and changing the internal database.
3.1. Administrative Console
The Certificate System provides a GUI-based administration tool called the Console that is used
for administrative tasks such as managing users and maintaining the subsystem, performs daily
operational and managerial duties for the subsystem, and configures the server.
NOTE
The TPS subsystem does not have an administrative console; administrative functions are
performed through the HTML services pages and by manually editing the
CS.cfg
file.
The Console is launched using the
pkiconsole
utility, with the hostname, subsystem SSL port, and
subsystem type specified.
pkiconsole https:// hostname:SSLport/subsystemType
For a Certificate Manager running a a host named
host.example.com
on the default CA SSL port
9443
, the console command would be as follows:
pkiconsole https://host.example.com:9443/ca
When the command is run, a prompt, opens for the administrative user ID and password.
The Console can be used to access the server locally or remotely, as long as the Certificate System is
installed. The Console has the following tabs:
• The
Configuration
tab shows information about the subsystem and is the way the configuration
settings are modified. The choices available in this tab are different depending on which subsystem
type the instance is. All subsystems have the following options:
• Users and groups
• Access control lists
• Logs
• Certificates