User manual REDHAT CERTIFICATE SYSTEM 8 AGENTS GUIDE

[. . . ] Red Hat Certificate System 8. 0 Agents Guide Using Web-Based Agent Services Publication date: July 22, 2009, updated April 30, 2010 Ella Deon Lackey Agents Guide Red Hat Certificate System 8. 0 Agents Guide Using Web-Based Agent Services Edition 8. 0. 5 Author Copyright © 2009 Red Hat, Inc. The text of and illustrations in this document are licensed by Red Hat under a Creative Commons Attribution­Share Alike 3. 0 Unported license ("CC-BY-SA"). An explanation of CC-BY-SA is available at http://creativecommons. org/licenses/by-sa/3. 0/. In accordance with CC-BY-SA, if you distribute this document or an adaptation of it, you must provide the URL for the original version. [. . . ] · To find a certificate with a specific serial number, enter the serial number in both the upper limit and lower limit fields in either decimal or hexadecimal. Use 0x to indicate the beginning of a hexadecimal number, such as 0x2A. Serial numbers are displayed in hexadecimal form in the Search Results and Details pages. · To find all certificates within a range of serial numbers, enter the upper and lower limits of the serial number range in decimal or hexadecimal. Leaving either the lower limit or upper limit field blank returns all certificates before or after the number specified. A certificate has one of the following status codes: · Valid. A valid certificate has been issued, its validity period has begun but not ended, and it has not been revoked. An invalid certificate has been issued, but its validity period has not yet begun. An expired certificate has passed the end of its validity period. The certificate has passed its validity period and been revoked. 47 Chapter 4. CA: Finding and Revoking Certificates · Subject Name. Lists certificates belonging to a particular owner; it is possible to use wildcards in this field. NOTE Certificate System certificate request forms support all UTF-8 characters for the common name, organizational unit, and requester name fields. The common name and organization unit fields are included in the subject name of the certificate. This means that the searches for subject names support UTF-8 characters. This support does not include supporting internationalized domain names. Lists certificates that have been revoked during a particular period, by a particular agent, or for a particular reason. For example, an agent can list all certificates revoked between July 2005 and April 2006 or all certificates revoked by the agent with the username admin. · To list certificates revoked within a time period, select the day, month, and year from the dropdown lists to identify the beginning and end of the period. · To list certificates revoked by a particular agent, enter the name of the agent; it is possible to use wildcards in this field. · To list certificates revoked for a specific reason, select the revocation reasons from the list. Lists certificates that have been issued during a particular period or by a particular agent. For example, an agent can list all certificates issued between July 2005 and April 2006 or all certificates issued by the agent with the username jsmith. [. . . ] Shows when a user successfully authenticates. Shows when a token is enrolled through the TPS. Shows when the applet on the token is upgraded. Shows when a user is not successfully processed by the authorization servlets. LOGGING_SIGNED_AUDIT_SIGNING changes in whether the audit log is signed. [. . . ]