Breadcrumbs

Set Up OpenTrust PKI

We assume that you have the installation CD or the installation files. In this guide, we are going to use the installation package containing the CentOS bundled OS and the OpenTrust PKI product. Follow the steps below to install the CentOS and OpenTrust PKI server application.

  1. Insert the installation CD.

  2. On the OpenTrust PKI CentOS installer start page, at the boot: prompt, enter: go. Only select an option other than go after consulting an assigned OpenTrust technical representative.

  3. On the Keyboard Type screen, select the type of keyboard being used to run the installer and enter OK.

  4. On the Time Zone Selection screen, select the time zone in which the host machine is located and enter OK.

  5. After the Attention! message, use the password displayed on the screen to log in as root.

    1. At the hostname login: prompt, where hostname is the name of the server that will host the OpenTrust PKI server application, enter: root.

    2. At the password prompt, enter the password.

  6. To change the password for root, enter: passwd and follow the prompts until a success message is received.

  7. At the root directory, enter:

# /root/OpenTrust/opentrust-pki-install

  1. Above command prompts a new screen. For this installer screen, you need following information to set up OpenTrust PKI server.

    1. IP addresses/subnet masks, hostnames, and the IP addresses of the DNS servers for servers that have been allocated to host the OpenTrust PKI.

    2. IP address or fully qualified DNS name used to access the NTP server or servers that will be used to synchronize the time on the host machine.

    3. IP address or fully qualified DNS name used to access the SMTP server that the OpenTrust PKI server application should use to send mail if the default Postfix mail system will not be used.

    4. Email addresses for the administrators who should receive system mail from the host machine, primarily from the cron service

More information is given in OpenTrust PKI documents which are bundled with OpenTrust PKI package (CentOS, OpenTrust PKI installer and Documentation).

  1. If you set up/installed the OpenTrust PKI server correctly, now you can reach the OpenTrust PKI server application by pointing your browser at https://dnsnameusedtoacesshostmachine.