7.4. Setting Up a Root Certificate Authority
The Certificate Authority (CA) subsystem is the prerequisite for all other Certificate System subsystems. Therefore, set up the CA before configuring other subsystems.
To set up a root CA in Certificate System, you have the following options:
- Configuration file-based installation:Use this method for high-level customization. This installation method uses a configuration file that overrides the default installation parameters.You can install Certificate System using a configuration file in a single step or in two steps. For details and examples, see:
- The pkispawn(8) man page for the single-step installation.
- Section 7.7, “Two-step Installation” for the two-step installation.
- Interactive installation:
# pkispawn -s CAUse the interactive installer if you only want to set the minimum of required configuration options.