7.4. Setting Up a Root Certificate Authority

The Certificate Authority (CA) subsystem is the prerequisite for all other Certificate System subsystems. Therefore, set up the CA before configuring other subsystems.
To set up a root CA in Certificate System, you have the following options:
  • Configuration file-based installation:
    Use this method for high-level customization. This installation method uses a configuration file that overrides the default installation parameters.
    You can install Certificate System using a configuration file in a single step or in two steps. For details and examples, see:
  • Interactive installation: 
    # pkispawn -s CA
    Use the interactive installer if you only want to set the minimum of required configuration options.