Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION, Руководство администратора

Страница: 416 / 554

Chapter 17. User and Group Authorization
394
The trusted manager relationship is set up in the following way:
• The subsystem trusts the other subsystem as a trusted manager by creating a user ID for the
subsystem, adding it to the trusted manager group, and storing its SSL client authentication
certificate.
• The trusted manager sets up a connector to the subsystem by specifying the agent services port for
that subsystem. All communications between the trusted manager and the subsystem go through
this port.
A subsystem authenticates to the subsystem which trusts it as a trusted manager using its SSL server
certificate for SSL client authentication.
17.2. Creating Users
To create an administrator, agent, or auditor, create a user in the Certificate System instance where
the user will have privileges and assign the user to the appropriate group. An agent or auditor must
have a certificate stored in the subsystem's internal database. If the Console is configured for SSL
client authentication, all administrators must also a certificate.
To create a new user entry, do the following:
1. Log into the administrative console.
pkiconsole https:// hostname:SSLport/subsystemType
2. In the
Configuration
tab, select
Users and Groups
. Click
Add
.
3. Fill in the information in the
Edit User Information
dialog.