...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
| Info |
|---|
| This article is valid for Certificate Manager 8.5 and later. |
This article describes how to do initial configuration of Protocol Gateway, using the provided enrollment templates file.
This instruction includes configuration of VRO and TLS parameters for connection and communication with the CM server. This is configured in cm-gateway.properties and determines the following:
...
| Expand |
|---|
|
The following prerequisites apply: |
...
Import and adapt standard configuration
...
| Expand |
|---|
| title | Get TLS CA certificate |
|---|
|
The CA certificate must be exported to be used in Protocol Gateway to trust the CA. In Administrator's workbench (AWB), - Select the Officer and System CA.
- In the menu, select Cross > Export Certificate > Binary.
- Store the certificate as SystemCA.cer.
This certificate shall be used later in the Protocol Gateway configuration.
|
Configure Protocol Gateway
| Expand |
|---|
| title | Copy officer and RA tokens to Protocol Gateway |
|---|
|
- Copy the Protocol Gateway Officer token and the Protocol Gateway RA token to the Protocol Gateway \conf folder, for example C:\ProgramData\Nexus\cm-gateway\conf\certdir.
- protocol-gateway-vro.p12
This is needed for Protocol Gateway as a virtual registration officer, when devices request certificates in an automated workflow. - protocol-gateway-ra.p12
This is needed for certain protocols (EST, CMP, CMC and SCEP), for example for Full PKI requests. The specified RA token is used to establish secure transactions with the end entities requesting certificates. For more information on Full PKI Requests, see the CMC specification: RFC 5272 Section 3.2.
|
...
| Expand |
|---|
|
For Protocol Gateway to trust the CM host: - Copy the TLS CA certificate SystemCA.cer to the \conf\certdir trust store folder, for example C:\ProgramData\Nexus\cm-gateway\conf\certdir.
|
...
| Expand |
|---|
| title | Start Protocol Gateway Tomcat service |
|---|
|
- Start the Protocol Gateway by starting the Tomcat service.
|
Set up protocols
To enable and configure protocols, see Configuration examples in Protocol Gateway.
...
