Renewing Admin Certificate

Overview

Warning

This document is still under construction.

This document describes several procedures to renew PKI admin certificate.

Using CMSGateway

Note	This procedure may require using Firefox earlier than version 69 that still supports <keygen>.

To renew the admin certificate using CMSGateway, configure the following parameter in /etc/pki/pki-tomcat/ca/CS.cfg:

cmsgateway.enableAdminEnroll=true

Restart the server, then follow the procedure at https://localhost.localdomain:8443/ca/admin/ca/adminEnroll.html.

Using pki-server cert-fix

See Renewing Admin Certificate using pki-server cert-fix.

Using PKI NSS CLI

See Renewing Admin Certificate using PKI NSS CLI.