Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE, Руководство администратора

Страница: 381 / 512

Setting up a Trusted Manager
361
Figure 16.1. Creating a New User
The group to which the user belongs determines what privileges the user has. Assign agents and
administrators to the appropriate subsystem group.
4. Store the user's certificate.
a. Request and issue an SSL client certificate for the user if one has not already been generated.
b. Copy the base-64 encoded certificate to a local file or to the clipboard.
c. Select the new user entry, and click
Certificates
.
d. Click
Import
, and paste in the base-64 encoded certificate.
16.3. Setting up a Trusted Manager
Trusted relationships are set up automatically during subsystem configuration. All subsystems within
the same security domain are automatically trusted; the security domain manager issues each
member of the security domain a subsystem certificate which the subsystem use to communicate with
each other. Setting up or modifying trust relationships is not necessary, except in rare situations when
an administrator may want to adjust different values.
Set up a trusted manager by doing the following: