[AG-TECH] Certificate Manager

[Christoph Willing]

On 13/11/2007, at 1:37 AM, Ben Green wrote:

> Does any documentation exist for requesting and importing an AG3  
> server certificate from the command line?

Ben,

Do you have absolutely no graphics at all on the server machine? If  
you have X on it, you could set it up as a vnc server. Then use  
vncviewer from another machine and run CertificateRequestTool or  
CertificateManager.

If you really have no graphics or don't want to use vnc, you can  
still use CertificateRequestTool or CertificateManager from any other  
machine to request the certificate; then again to retrieve and import  
it (from the same "wrong" machine) when you've been emailed that its  
ready. Now you can use certmgr from the command line to export it to  
a file (run certmgr, list the available certs, export the one you  
want). Now copy the certificate file to your server and then run  
certmgr on the server to import the new certificate (and make it the  
default, if you have multiple certs on that machine).

Back at the machine you originally used to request the certificate,  
you could tidy up by removing the server certificate with certmgr or  
CertificateManager.


chris


Christoph Willing                       +61 7 3365 8350
QCIF Access Grid Manager
University of Queensland