Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION, Руководство администратора

Страница: 17 / 554

xvii
About This Guide
This guide explains how to install, configure, and maintain the Red Hat Certificate System and how to
use it for issuing and managing certificates to end entities such as web browsers, users, servers, and
virtual private network (VPN) clients.
This guide is intended for experienced system administrators planning to deploy the Certificate
System. Certificate System agents should refer to the
Certificate System Agent's Guide
for information
on how to perform agent tasks, such as handling certificate requests and revoking certificates.
1. Recommended Knowledge
Before reading this guide, be familiar with the following concepts:
• Intranet, extranet, and Internet security and the role of digital certificates in a secure enterprise,
including the following topics:
• Encryption and decryption
• Public keys, private keys, and symmetric keys
• Significance of key lengths
• Digital signatures
• Digital certificates, including different types of digital certificates
• The role of digital certificates in a public-key infrastructure (PKI)
• Certificate hierarchies
• LDAP and Red Hat Directory Server
• Public-key cryptography and the Secure Sockets Layer (SSL) protocol, including the following:
• SSL cipher suites
• The purpose of and major steps in the SSL handshake
2. What Is in This Guide
This guide contains the following elements:
•
Chapter 1, Overview
lists Certificate System features, an overview of how the Certificate System
works, an architectural overview of Certificate System, and lists the standards used in the product.
•
Chapter 2, Installation and Configuration
provides step-by-step installation instructions.
•
Chapter 3, Administrative Basics
provides information and procedures for performing configuration
that is common to all subsystems such as using the administrative console, starting and stopping
the server, viewing and setting logs, and running self-tests.
•
Chapter 4, Certificate Manager
provides information and instructions for configuring the Certificate
Manager and an overview of the configuration options.