Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION, Admin Manual

Page: 282 / 564

Chapter 11. Setting Automated Jobs
260
11.1.2.2. requestInQueueNotifier
The
requestInQueueNotifier
module checks the status of the request queue at pre-configured
time intervals. If any deferred enrollment requests are waiting in the queue, the job constructs an email
message summarizing its findings and sends it to the specified agents.
11.1.2.3. publishCerts
The
publishCerts
module checks for any new certificates that have been added to the publishing
directory that have not yet been published. When these new certificates are added, they are
automatically published to an LDAP directory or file by the
publishCerts
job.
NOTE
Most of the time, publishers immediately publish any certificates that are created matching
their rules to the appropriate publishing directory.
If a certificate is successfully published when it is created, then the
publishCerts
job will not re-publish the certificate. Therefore, the new certificate will not be listed
in the job summary report, since the summary only lists certificates published by the
publishCerts
job.
11.1.2.4. unpublishExpiredCerts
Expired certificates are not automatically removed from the publishing directory. If a Certificate
Manager is configured to publish certificates to an LDAP directory, over time the directory will contain
expired certificates.
The
unpublishExpiredCerts
job checks for certificates that have expired and are still marked as
published
in the internal database at the configured time interval. The job connects to the publishing
directory and deletes those certificates; it then marks those certificates as
unpublished
in the
internal database. The job collects a summary of expired certificates that it deleted and mails the
summary to the agents or administrators specified by the configuration.
NOTE
This job automates removing expired certificates from the directory. Expired certificates
can also be removed manually; for more information on this, see
Section 8.7, “Updating
Certificates and CRLs in a Directory”
.
11.2. Setting up the Job Scheduler
The Certificate Manager can execute a job only if the Job Scheduler is enabled. The job settings,
such as enabling the job schedule, setting the frequency, and enabling the job modules, can be done
through the Certificate System CA Console or through editing the
CS.cfg
file.
To turn the Job Scheduler on:
1. Open the Certificate Manager Console.
pkiconsole https://server.example.com:9445/ca