z/OS Cryptographic Services PKI Services Guide and Reference
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Updating the Web server configuration if you use REXX CGI execs

z/OS Cryptographic Services PKI Services Guide and Reference
SA23-2286-00

Before you begin

This procedure requires you to be familiar with the information in the following topics, where you find additional details:

Procedure

Perform the following steps to customize the IBM HTTP Server configuration files for this new CA domain.
  1. Add this new CA domain (check Table 1 for domain name and directory) following the instructions in Steps for adding application domains to the Web server configuration files. If you have a CRLDistDirPath configured in your pkiserv.conf file for HTTP protocol URI format CRL distribution points, add a Pass statement in the appropriate location in the HTTP configuration file to map the virtual pathname in the URI to the CRLDistDirPath value.
    Pass /Employees/crls/* /var/pkiserv/employees/*  
  2. (Optional) If you intend to have a dedicated set of administrators for each CA domain, repeat Step 1 for the administrative domain. (Check Table 1 for domain name and directory.) Otherwise, skip to Step 3.
  3. Update the HTTP Server environment variables. Edit the httpd.envvars file by entering the following command from the UNIX command line:
    oedit /etc/httpd.envvars
  4. Add the environment variable identifying the runtime directory of this CA domain. (Check Table 1.)
    _PKISERV_CONFIG_PATH_EMPLOYEES=/etc/pkiserv/employees
  5. (Optional) If you intend to have a dedicated set of administrators for each CA domain, add the environment variable identifying the pkiserv.tmpl directory of this administrative CA domain.
    _PKISERV_CONFIG_PATH_ADMEMPLOYEES=/etc/pkiserv/employees
When you are done: You have customized the IBM HTTP Server configuration files for this CA domain. Record your progress in Table 1.

Continue to the next subtask. Complete all subtasks for this new CA domain and ensure that it operates properly before adding another CA domain.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014