Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE, Руководство администратора

Страница: 66 / 512

Chapter 2. Installation and Configuration
46
Pressing
Next
causes the browser to generate a key pair which consists of a public key and a private
key. The public key is packaged in a certificate request that is submitted to the CA. If the requests are
submitted to a Certificate System CA, the CA approves and signs the certificate request automatically,
and the certificate is returned in the browser in the next panel.
2.5. Installing the Certificate System
The installation process consists of two main steps: obtaining the packages and configuring the
subsystems. This section explains how to obtain and install the Certificate System packages.
There are two ways to obtain and install the subsystem packages. For all supported platforms, the
Certificate System packages can be downloaded as ISO images through the appropriate Red Hat
Network channel. These packages are then installed through a package utility; on Red Hat Enterprise
Linux systems, this is
rpm
and on Solaris 9,
pkgadd
.
Alternatively, if the appropriate network access is available, the subsystems and all dependencies can
be downloaded and installed on Red Hat Enterprise Linux systems using the
up2date
command.
Whether downloading and installing the Certificate System from an ISO image or through
up2date
,
several packages are also installed for related applications and dependencies, not only for the
subsystem packages. These packages are listed in
Section 2.2.3.1, “Red Hat Enterprise Linux RPMs”
and
Section 2.2.3.2, “Solaris Packages”
.
•
Section 2.5.1, “Installing from an ISO Image”
•
Section 2.5.2, “Installing through up2date”
2.5.1. Installing from an ISO Image
For Sun Solaris and Red Hat Enterprise Linux AS and ES, use the following procedure to install the
Certificate System from an ISO image:
1. Open the appropriate
Red Hat Certificate System 7.2
Red Hat Network channel and download
the packages.
Solaris packages are contained in a single ISO image; Red Hat Enterprise Linux packages can be
downloaded as an ISO image or individually.
2. Log into the machine as the
root
user.
3. Install the
rhpki-manage
package and run
rhpki-install
manually. For example, on Red Hat
Enterprise Linux:
rpm -Uvh rhpki-manage- version .noarch.rpm
After you have installed the
rhpki-manage
package, use the
rhpki-install
script to install
the subsystem. For example:
rhpki-install -pki_subsystem= subsystem_type
-pki_package_path= /path/to/ISO_image -force