User manual REDHAT CERTIFICATE SYSTEM 8.0 ADMINISTRATION

[. . . ] Red Hat Certificate System 8. 0 Admin Guide Publication date: July 22, 2009, updated on March 25, 2010 Admin Guide Red Hat Certificate System 8. 0 Admin Guide Copyright © 2009 Red Hat, Inc. The text of and illustrations in this document are licensed by Red Hat under a Creative Commons Attribution­Share Alike 3. 0 Unported license ("CC-BY-SA"). An explanation of CC-BY-SA is available at http://creativecommons. org/licenses/by-sa/3. 0/. In accordance with CC-BY-SA, if you distribute this document or an adaptation of it, you must provide the URL for the original version. [. . . ] In the Enrollment tab, open the customized enrollment form. Fill in the values, and submit the request. Enter the password to the key database when prompted. When the correct password is entered, the client generates the key pair. Do not interrupt the key-generation process. Upon completion of the key generation, the request is submitted to the server to issue the certificate. The server subjects the request to the certificate profile and issues the certificate only if the request meets all the requirements. When the certificate is issued, install the certificate in the browser. Verify that the certificate is installed in the browser's certificate database. If directory- or PIN-based authentication was configured with PIN removal, re-enroll for another certificate using the same PIN. Managing Authentication Plug-ins Custom authentication plug-in modules can be registered through the CA Console. Authentication plug-in modules can also be deleted through the CA Console. Before deleting a module, delete instances that are based on that module. Log into the console. pkiconsole https://server. example. com:9445/ca 2. In the Configuration tab, click Authentication in the navigation tree 3. In the right pane, click the Authentication Plug-in Registration tab. The tab lists modules that are already registered. To delete a registered module, select that module, and click Delete. The Register Authentication Plug-in Implementation window appears. Specify which module to register by filling in the two fields: · Plugin name. The full name of the class for this module. This is the path to the implementing JavaTM class. [. . . ] For example, a Certificate Manager must have a signing certificate that's public key corresponds to the private key it uses to sign the certificates it issues. A signing key and its equivalent public key, plus an encryption key and its equivalent public key, constitute a dual key pair. In Certificate System, a password that simplifies the way to sign on to Red Hat Certificate System by storing the passwords for the internal database and tokens. Each time a user logs on, he is required to enter this single password. [. . . ]