Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE, Руководство администратора

Страница: 245 / 512

Viewing Database Content
225
page which has been customized to enroll for cross-pair certificates by providing the hidden value
certType==fbca
.
For information on publishing cross-pair certificates,
Section 14.6.1, “Publishing Cross-Pair
Certificates”
.
10.4.2. Viewing Database Content
The certificates stored in the subsystem certificates database,
cert8.db
, can be viewed through the
subsystem administrative console. Alternatively, the certificates can be listed using the
certutil
utility.
certutil
must be used to view the TPS certificates because the TPS subsystem does not use
an administrative console.
•
Section 10.4.2.1, “Viewing Database Content through the Console”
•
Section 10.4.2.2, “Viewing Database Content Using certutil”
NOTE
The certificates listed in the
cert8.db
database are the subsystem certificates used
for subsystem operations. User certificates are stored with the user entries in the LDAP
internal database. To view user certificates, see
Section 10.3.1, “Managing Certificate
System User and Agent Certificates”
.
10.4.2.1. Viewing Database Content through the Console
To view the contents of the database through the administrative console, do the following:
1. Open the Certificate System Console.
pkiconsole https:// hostname:SSLport/subsystemType
2. In the
Configuration
tab, select
System Keys and Certificates
from the left navigation tree.
3. There are two tabs,
CA Certificates
and
Local Certificates
, which list different kinds of
certificates.
•
CA Certificates
lists CA certificates for which the corresponding private key material is not
available, such as certificates issued by third-party CAs such as Entrust or Verisign or external
Certificate System Certificate Managers.
•
Local Certificates
lists certificates kept by the Certificate System subsystem instance, such as
the DRM transport certificate or OCSP signing certificate.