Red Hat DIRECTORY SERVER 8.0 Manual de usuario descargar pdf (Pagina 14)

nCipher Modules: Integration Guide for Red Hat Certificate System 8.0 1.0 14

Installing and configuring Red Hat Certificate System 8.0

12 Run the following command to view the Tokeninfo:

[root@hostname alias]# TokenInfo /var/lib/pki-ca/alias/

Database Path: /var/lib/pki-ca/alias/

Found external module 'NSS Internal PKCS #11 Module'

Found external module 'nfast'

Found external token 'ocs'

[root@hostname alias]#

Note The output shown above is displayed when OCS protection is used.

13 Before creating the Security Domain, add pkiuser in /etc/group:

nfast:x:106:pkiuser

14 To allow access for the Thales nCipher library, run the following commands:

[root@hostnamehome]# chcon -t bin_t '/opt/nfast/toolkits/pkcs11/libcknfast.so'

[root@hostname home]# semanage fcontext -a -t bin_t '/opt/nfast/toolkits/pkcs11/libcknfast.so'

Note For 64-bit environments, run the following commands:

[root@hostnamehome]# chcon -t bin_t '/opt/nfast/toolkits/pkcs11/libcknfast-64.so'

[root@hostname home]# semanage fcontext -a -t bin_t '/opt/nfast/toolkits/pkcs11/libcknfast-64.so'

15 Open

https://hostname:9445/ca/admin/console/config/login?pin=xxxxxxxxxxxxxxxxxxxxxxxx. A

similar URL can found in /var/log/pki-ca-install.log.

16 In the

Create a Security Domain panel, enter Red Hat Security as Security Domain Name.

17 In the

Sub System Type panel, select Configure this instance as a New CA Subsystem, and then

select Certificate Authority as the Subsystem name.

18 In the

PKI Hierarchy panel, select Make this Selfsigned Root CA.

19 In the

Internal Database panel, fill in the correct LDAP server information.

20 In the

Key Store panel, select Thales nCipher Hardware as the default login.

1 2 ... 9 10 11 12 13 14 15 16 17 18

Sin comentarios

Red Hat DIRECTORY SERVER 8.0 Manual de usuario Pagina 14