Configuring System Certificate Profiles

Overview

System certificate profiles are used to generate the initial system certificates during installation.

The system certificate profile templates are stored in /usr/share/pki/ca/conf. During CA installation the system certificate profiles will be copied into /var/lib/pki/<instance>/<subsystem>/conf.

To customize system certificates profiles, see Two-Step Installation.

See also CA Certificate Profiles.

Configuration

System certificate profile configuration consists of the following parameters:

id=...
name=...
description=...
profileIDMapping=...
profileSetIDMapping=...
list=<list of numbers>
<number>.default.class=...
<number>.default.name=...
<number>.default.params.<name>=...

See also Certificate Profile Constraints.

Available Profiles

• rsaAdminCert.profile

• eccServerCert.profile

• ECsubsystemCert.profile

• rsaServerCert.profile

• eccAdminCert.profile

• rsaSubsystemCert.profile

• caOCSPCert.profile

• caCert.profile

• eccSubsystemCert.profile

• caAuditSigningCert.profile

• ECserverCert.profile

• ECadminCert.profile

See Also

• Certificate Profiles

• RFC 3280