Red Hat CERTIFICATE SYSTEM 8 - DEPLOYMENT, Инструкция по установке

Страница: 125 / 132

Default CA Instance Information
115
When the Certificate System is first installed, one instance for each subsystem type is also installed.
The default information such as the port numbers, instance name, and configuration file location for
each subsystem (after being installed and going through the setup process) is listed in the following
sections.
9.5.1. Default CA Instance Information
The default CA configuration is listed in
Table 9.3, “Default CA Instance Information”
. Most of these
values are unique to the default instance; the default certificates and some other settings are true for
every CA instance.
Setting Value
Standard Port 9180
Agents Port 9443
End Users Port 9444
End-Entites Client Authentication Port 9446
Admin Port 9445
Tomcat Port 9701
Instance Name pki-ca
Main Directory /var/lib/pki-ca
Configuration Directory /etc/pki-ca
Configuration File /etc/pki-ca/CS.cfg
/etc/pki-ca/password.conf
Subsystem Certificates CA signing certificate
OCSP signing certificate (for the CA's internal
OCSP service)
SSL server certificate
Audit log signing certificate
Subsystem certificate
1
Security Databases /var/lib/pki-ca/alias
Log Files /var/log/pki-ca
Install Logs /var/log/pki-ca-install.log
Process File /var/run/pki-ca.pid
Profile Files /var/lib/pki-ca/profiles/ca
Email Notification Templates /var/lib/pki-ca/emails
Web Services Files /var/lib/pki-ca/webapps - Agent services
/var/lib/pki-ca/webapps.admin - Admin services
/var/lib/pki-ca/webapps.ee - End user services
The subsystem certificate is always issued by the security domain so that domain-level operations that require client
authentication are based on this subsystem certificate.
Table 9.3. Default CA Instance Information