Course Content
Overview
- Overview of the RSA Digital Certificate Solution product suite - its components and architecture
- Overview of the RSA Digital Certificate Solution administration interface
Planning and Installing RSA Certificate Manager
- Planning your certificate needs and product deployment
- Certificate Manager hardware and software requirements
- Installing Certificate Manager
Configuring RSA Certificate Manager
- Creating the CA structure
- Configuring High Availability
Installing RSA Registration Manager and RSA OneStep
- Registration Manager overview
- Registration Manager hardware and software requirements
- Installing Registration Manager
- Installing OneStep
- Enrolling for certificates using OneStep
Vetting Certificates
- Creating trust relationships
- Obtaining a Vettor certificate
- Editing certificate roles and vettor rights
- Enrolling for end-user certificates
- Vetting end-user certificate requests
Managing Status
- Changing certificate status
- Changing CA status
- Generating Certificate Revocation Lists (CRLs)
- Generating Authority Revocation Lists (ARLs)
- Configuring CRLs
- Configuring a jurisdiction for external publishing
- Configuring a CA for local publishing
- Configuring CRL distribution points
Maintaining Certificates
- Viewing certificates
- Creating reports based on search criteria
- Modifying and creating certificate profiles
- Configuring certificate expiry
- Creating a certificate renewal policy
- Renewing certificates
- Reissuing an internal server certificate
Troubleshooting
- Identifying common issues, causes and solutions
- Monitoring the system using log files, events and tracing
- Backing up and restoring the Certificate Authority database
Installing and Managing RSA Key Recovery Manager
- Key Recovery Manager overview
- Planning considerations for Key Recovery Manager
- Installing Key Recovery Manager
- Enabling a Jurisdiction for Key Recovery
- Obtaining end-user single-use certificates
- Renewing certificates
- Obtaining a KRO certificate
- Recovering encryption keys and certificates
