Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION, Admin Manual

Page: 264 / 564

Chapter 9. Authentication for Enrolling Certificates
242
It is also possible for a router to submit a certificate request directly to the CA. In that case, the CA
uses the
flatFileAuth
authentication module to process a text file which contains the router's
authentication credentials.
9.2.4.1. Configuring the flatFileAuth Module
Flat file authentication is already configured for SCEP enrollments, but the location of the flat file and
its authentication parameters can be edited.
1. Open the CA Console.
pkiconsole https://server.example.com:9445/ca
2. In the
Configuration
tab, select
Authentication
in the navigation tree.
3. Select the
flatFileAuth
authentication module.
4. Click
Edit/View
.
5. To change the file location and name, reset the
fileName
field.
To change the authentication name parameter, reset the
keyAttributes
value to another
value submitted in the SCEP enrollment form, like CN. It is also possible to use multiple name
parameters by separating them by commas, like
UID,CN
. To change the password parameter
name, reset the
authAttributes
field.