Red Hat CERTIFICATE SYSTEM 8 - DEPLOYMENT, Инструкция по установке

Страница: 107 / 132

About pkisilent
97
Parameter Description
domain_name The name of the security domain to which the
subsystem will be added.
sd_hostname The hostname of the CA which hosts security
domain.
sd_admin_port The administrative SSL port of the CA which
hosts security domain.
sd_agent_port The agent SSL port of the CA which hosts
security domain.
sd_ssl_port The end-entities SSL port of the CA which hosts
security domain.
sd_admin_name The username of the administrative user for the
CA hosting the security domain.
sd_admin_password The password of the administrative user for the
CA hosting the security domain.
Internal Database Configuration
ldap_host The hostname of the Directory Server machine.
ldap_port The non-SSL port of the Directory Server.
bind_dn The bind DN which will access the Directory
Server; this is normally the Directory Manager ID.
bind_password The bind DN password.
base_dn The entry DN under which to create all of the
subsystem entries.
db_name The database name.
Subsystem Certificates and Keys
Configuration
key_size The size of the key to generate. The
recommended size for an RSA key is 1048 bits
for regular operations and 2048 bits for sensitive
operations.
key_type The type of key to generate; the only option is
RSA.
key_algorithm The hashing algorithm to use for the key pair.
This is only used for root CA subsystems;
hashing algorithms for other subsystems and sub
CAs are set by editing the certificate profile.
save_p12 Sets whether to export the keys and certificate
information to a backup PKCS #12 file.
true
backs up the information;
false
does not back
up the information.
Only for the CA subsystem.
backup_pwd The password to protect the PKCS #12
backup file containing the subsystem keys and
certificates.
Not for use with TPS installation.