Show Table of Contents
7.5. Setting up Additional Subsystems
After you have installed the root Certificate Authority (CA) as described in Section 7.4, “Setting Up a Root Certificate Authority”, you can install additional Certificate System subsystems.
Prerequisites
All additional subsystems require a root Certificate Authority (CA). If you have not installed a root Certificate System CA, see Section 7.4, “Setting Up a Root Certificate Authority”.
Installing the Subsystem
To set up an additional subsystem, you have the following options:
- Configuration file-based installation:Use this method for high-level customization. This installation method uses a configuration file that overrides the default installation parameters.You can install Certificate System using a configuration file in a single step or in two steps. For details and examples, see:
- The pkispawn(8) man page for the single-step installation.
- Section 7.6, “Two-step Installation” for the two-step installation.
- Interactive installation:Use the interactive installer if you only want to set the minimum of required configuration options.For example:
# pkispawn -s subsystem
Replace subsystem with one of the following subsystems:KRA,OCSP,TKS, orTPS.The interactive installer does not support installing a subordinate CA. To install a subordinate CA, use the two-step installation. See Section 7.6, “Two-step Installation”.
Where did the comment section go?
Red Hat's documentation publication system recently went through an upgrade to enable speedier, more mobile-friendly content. We decided to re-evaluate our commenting platform to ensure that it meets your expectations and serves as an optimal feedback mechanism. During this redesign, we invite your input on providing feedback on Red Hat documentation via the discussion platform.