Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE, Руководство администратора

Страница: 45 / 512

Prerequisites
25
issue and the nature of the certificate chain. This may not be acceptable for some PKI deployments.
One benefit of chaining to a public CA is that the third party is responsible for submitting the root CA
certificate to a web browser or other client software, which is a major advantage for certificates that
are accessed by different companies with browsers that cannot be controlled by the administrator.
•
Subordination to a Certificate System CA
. Setting up a Certificate System CA as the root CA means
that the Certificate System administrator has control over all subordinate CAs by setting policies that
control the contents of the CA signing certificates issued. A subordinate CA issues certificates by
evaluating its own authentication and certificate profile configuration, without regard for the root CA's
configuration.
It is easiest to make the first CA installed a self-signed root, so that it is not necessary to apply to a
third party and wait for the certificate to be issued. Before deploying the full PKI, however, consider
whether to have a root CA, how many to have, and where both root and subordinate CAs will be
located.
2.2. Prerequisites
This section covers required information such as the supported platforms, the packages installed, and
dependencies and programs.
•
Section 2.2.1, “Supported Platforms”
•
Section 2.2.2, “Required Programs and Dependencies”
•
Section 2.2.3, “Packages Installed”
2.2.1. Supported Platforms
Certificate System server packages are available for the following platforms:
• Red Hat Enterprise Linux AS 4 (Intel 32-bit)
• Red Hat Enterprise Linux AS 4 (Intel 64-bit)
• Red Hat Enterprise Linux ES 4 (Intel 32-bit)
• Red Hat Enterprise Linux ES 4 (Intel 64-bit)
• Solaris 9 (Sparc 64-bit)
Certificate System client packages are available for the following platforms:
• Apple Macintosh OS X 10.4.x (Tiger) (Power PC 32-bit, Intel Mac)
• Microsoft Windows XP Professional (Intel 32-bit)
• Red Hat Enterprise Linux AS 4 (Intel 32-bit)
• Red Hat Enterprise Linux AS 4 (Intel 64-bit)
• Red Hat Enterprise Linux ES 4 (Intel 32-bit)
• Red Hat Enterprise Linux ES 4 (Intel 64-bit)