Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION, Admin Manual

Page: 360 / 564

Chapter 14. Managing Certificate System Users and Groups
338
4. Fill in the group ID and the name of the group; the name can be longer than the GID, more like a
description, to help differentiate the group.
5. Click the
Add New Group
link at the top of the form.
6. After the group is created, add it to the RA configuration so that the group has agent or
administrative functions.
a. Stop the RA instance.
service pki-ra stop
Always stop a subsystem before editing the subsystem configuration files.
b. Open the
CS.cfg
file.
vim /var/lib/pki-ra/conf/CS.conf
c. Add the new group's GID to the administrator or agent group list.
admin.authorized_groups=administrators, example
agent.authorized_groups=administrators,agents, example
d. Start the RA instance.
service pki-ra start
14.4.1.3. Adding and Removing Users in an RA Group
When a group is created, it does not have any members. Likewise, as new users are added, they have
to be added to a group for them to be granted any privileges to the RA.
1. Open the RA services page.