Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION, Руководство администратора

Страница: 311 / 554

Input Reference
289
•
caTransportCert
. For a transport signing certificate, used by the DRM.
•
caUserCert
. For enrolling end user certificates.
13.5. Input Reference
An input puts certain fields on the enrollment page associated with a particular certificate profile.
The inputs set for a certificate profile are used to generate the enrollment page dynamically with the
appropriate fields; these input fields collect necessary information for the profile to generate the final
certificate.
13.5.1. Certificate Request Input
The
Certificate Request
input is used for enrollments in which a certificate request is pasted into
the enrollment form. It allows the request format to be set from a drop-down list and provides an input
field to paste the request.
This input puts the following fields in the enrollment form:
•
Certificate Request Type
. This drop-down menu lets the user specify the certificate request type.
The choices are PKCS #10, CRMF, and CMC.
•
Certificate Request
. This is the text area in which to paste the request.
13.5.2. CMC Certificate Request Input
The
CMC Certificate Request
input is used for enrollments using a Certificate Message over
CMS (CMC) certificate request is submitted in the request form. The request type is preset to CMC,
and the only field is the
Certificate Request
text area in which to paste the request.
13.5.3. Dual Key Generation Input
The
Dual Key Generation
input is for enrollments in which dual key pairs will be generated, and
thus two certificates issued, one for signing and one for encryption.
This input puts the following fields into the enrollment form:
•
Key Generation Request Type
. This field is a read-only field displaying
crmf
as the request type.
•
Key Generation Request
. This field is a read-only field displaying
1024 (Encryption), 1024
(Signing)
as the key generation request.
13.5.4. File-Signing Input
The
File-Signing
input sets the fields to sign a file to show it has not been tampered with.
This input creates the following fields:
•
Key Generation Request Type
. This field is a read-only field displaying
crmf
as the request type.
•
Key Generation Request
. This field is a read-only field displaying
1024 (High-grade)
as the
key generation request.
•
URL Of File Being Signed
. This gives the location of the file which is to be signed.