Download Red Hat Certificate System 8.0 Install Guide

Chapter 4. Additional Installation Options
T here are two library files for the Certicom ECC modules, libsbcpgse.so and libsbgse2.so.
2. Cache the recent shared libraries.
ldconfig
3. Install the CA, but do not go through the configuration wizard.
4. Stop the CA.
service pki-ca stop
5. T he CA runs as the pkiuser user. As root, create a home directory for pkiuser.
/usr/sbin/usermod --home /usr/share/pki/pkiuser pkiuser
cd /usr/share/pki
mkdir pkiuser
HOME=/usr/share/pki/pkiuser
export HOME
6. Open the subsystem's alias directory. For example:
cd /var/lib/pki-ca/alias
7. Install the third-party module in the CA's security databases so it is available for the configuration.
modutil -dbdir . -nocertdb -add certicom -libfile /usr/lib/libsbcpgse.so
T his creates a .certicom directory in the new pkiuser home directory.
8. Certicom's ECC module includes an initpin file; copy this into the new pkiuser directory and give
it execute permissions. For example:
cp /tmp/initpin /usr/share/pki/pkiuser
chmod +x initpin
9. Run Certicom's initpin file from the /usr/share/pki/pkiuser directory. T his first prompts
for the directory to use for the Certicom token databases; use the pkiuser home directory,
/usr/share/pki/pkiuser. T his also prompts to set a password for the module, and then
proceed with configuring the module.
59