Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION, Admin Manual

Page: 298 / 564

Chapter 12. Editing Configuration in the CS.cfg File
276
Setting Value
Agents Port
1
11443
Admin Port
1
11445
Tomcat Port
1
11701
Instance Name pki-ocsp
Main Directory /var/lib/pki-ocsp
Configuration Directory /etc/pki-ocsp
Configuration File /etc/pki-ocsp/CS.cfg
/etc/pki-ocsp/password.conf
Subsystem Certificates OCSP signing certificate
SSL server certificate
Audit log signing certificate
Subsystem certificate
2
Security Databases /var/lib/pki-ocsp/alias
Log Files /var/log/pki-ocsp
Install Logs /var/log/pki-ocsp-install.log
Process File /var/run/pki-ocspocsp.pid
Web Services Files /var/lib/pki-ocsp/webapps
Running
service
instance_name
status
lists all of the configured ports and URLs (interfaces) for the subsystem instance.
The subsystem certificate is always issued by the security domain so that domain-level operations that require client
authentication are based on this subsystem certificate.
Table 12.4. Default OCSP Instance Information
12.1.5. Default TKS Instance Information
The default TKS configuration is listed in
Table 12.5, “Default TKS Instance Information”
. Most of these
values are unique to the default instance; the default certificates and some other settings are true for
every TKS instance.
Setting Value
Standard Port
1
13180
Secure End Users Port
1
13444
Agents Port
1
13443
Admin Port
1
13445
Tomcat Port
1
13701
Instance Name pki-tks
Main Directory /var/lib/pki-tks
Configuration Directory /etc/pki-tks
Configuration File /etc/pki-tks/CS.cfg
/etc/pki-tks/password.conf
Subsystem Certificates SSL server certificate
Audit log signing certificate
Subsystem certificate
2