Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION, Admin Manual

Page: 302 / 564

Chapter 12. Editing Configuration in the CS.cfg File
280
• The security domain to which the instance belongs
• Subsystem certificates
• Other subsystems used by the subsystem instance
• Database types and instances used by the subsystem
• Settings for PKI-related tasks, like the key profiles in the TKS, the certificate profiles in the CA, and
the required agents for key recovery in the DRM
Many of the configuration parameters (aside from the ones for PKI tasks) are very much the same
between the CA, OCSP, DRM, and TKS because they all use a Java-based console, so configuration
settings which can be managed in the console have similar parameters.
The
CS.cfg
file a basic
parameter=value
format.
#comment
parameter=value
In the
CS.cfg
file, many of the parameter blocks have descriptive comments, commented out with
a pound (#) character. Comments, blank lines, unknown parameters, or misspelled parameters are
ignored by the server.
Parameters that configure the same area of the instance tend to be grouped together into the same
block.
log.instance.System._000=##
log.instance.System._001=## System Logging
log.instance.System._002=##
log.instance.System.bufferSize=512
log.instance.System.enable=true
log.instance.System.expirationTime=0
log.instance.System.fileName=/var/lib/pki-ca/logs/system
log.instance.System.flushInterval=5
log.instance.System.level=3
log.instance.System.maxFileSize=2000
log.instance.System.pluginName=file
log.instance.System.rolloverInterval=2592000
log.instance.System.type=system
Example 12.1. Logging Settings in the CS.cfg File
Some areas of functionality are implemented through plug-ins, such as self-tests, jobs, and
authorization to access the subsystem. For those parameters, the plug-in instance has a unique
identifier (since there can be multiple instances of even the same plug-in called for a subsystem), the
implementation plug-in name, and the Java class.
authz.impl._000=##
authz.impl._001=## authorization manager implementations
authz.impl._002=##
authz.impl.BasicAclAuthz.class=com.netscape.cms.authorization.BasicAclAuthz
authz.instance.BasicAclAuthz.pluginName=BasicAclAuthz
Example 12.2. Subsystem Authorization Settings