System information

Silent Installation
The Certificate System includes a tool, pkisilent, which can completely create and configure
an instance in a single step. Normally, adding instances requires running the pkicreate utility
to create the instance and then accessing the subsystem HTML page to complete the
configuration. The pkisilent utility creates and configures the instance in a single step. The
pkisilent tool must be downloaded independently. It is available through the Red Hat
Certificate System 7.3 Red Hat Network channel.
NOTE
Run this tool on a system which already has a subsystem installed, since this
tool depends on having libraries, JRE, and core jar files already installed.
Two files are installed for the pkisilent tool:
• pkisilent, the Perl wrapper script.
• pkisilent.jar, the jar files containing the Java™ classes to perform a silent installation.
The utility can be downloaded and saved to any location and is then executed locally.
1. Syntax
This tool has the following syntax for a CA:
perl pkisilent ConfigureCA -cs_hostname hostname
-cs_port SSLport
-client_certdb_dir certDBdir
-client_certdb_pwd password
-preop_pin preoppin
-domain_name domain_name
-admin_user adminUID
-admin_email admin@email
-admin_password password
-agent_name agentName
-agent_key_size keySize
-agent_key_type keyType
-agent_cert_subject cert_subject_name
-ldap_host hostname
-ldap_port port
-bind_dn bindDN
-bind_password password
-base_dn search_base_DN
-db_name dbName
-key_size keySize
-key_type keyType
Chapter 2.
5