Before you begin
This procedure requires
you to be familiar with the information in the following topics, where
you find additional details:
Procedure
Perform the following steps to
customize the
IBM HTTP Server configuration
files for this new CA domain.
- Add this new CA domain (check Table 1 for domain name and directory)
following the instructions in Steps for adding application domains to the Web server configuration files.
If you have a CRLDistDirPath configured in your pkiserv.conf file
for HTTP protocol URI format CRL distribution points, add a Pass statement
in the appropriate location in the HTTP configuration file to map
the virtual pathname in the URI to the CRLDistDirPath value.
Pass /Employees/crls/* /var/pkiserv/employees/*
- (Optional) If you intend to have a dedicated set of administrators
for each CA domain, repeat Step 1 for
the administrative domain. (Check Table 1 for domain name and directory.)
Otherwise, skip to Step 3.
- Update the HTTP Server environment variables. Edit
the httpd.envvars file by entering the following
command from the UNIX command
line:
oedit /etc/httpd.envvars
- Add the environment variable identifying the runtime directory
of this CA domain. (Check Table 1.)
_PKISERV_CONFIG_PATH_EMPLOYEES=/etc/pkiserv/employees
- (Optional) If you intend to have a dedicated set of administrators
for each CA domain, add the environment variable identifying the pkiserv.tmpl directory
of this administrative CA domain.
_PKISERV_CONFIG_PATH_ADMEMPLOYEES=/etc/pkiserv/employees
When you are done: You
have customized the
IBM HTTP Server configuration
files for this CA domain. Record your progress in
Table 1.
Continue
to the next subtask. Complete all subtasks for this new CA domain
and ensure that it operates properly before adding another CA domain.