1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
|
<!-- --- BEGIN COPYRIGHT BLOCK ---
This library is free software; you can redistribute it and/or
modify it under the terms of the GNU Lesser General Public
License as published by the Free Software Foundation.
This library is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
Lesser General Public License for more details.
You should have received a copy of the GNU Lesser General Public
License along with this library; if not, write to the Free Software
Foundation, Inc., 51 Franklin Street, Fifth Floor,
Boston, MA 02110-1301 USA
Copyright (C) 2007 Red Hat, Inc.
All rights reserved.
--- END COPYRIGHT BLOCK --- -->
<SCRIPT type="text/JavaScript">
function myOnLoad() {
}
function performPanel() {
with (document.forms[0]) {
submit();
}
}
</SCRIPT>
<h2>$panelname</h2>
<br/>
A security domain is a registry for all of the PKI services within an enterprise. Applications may use the security domain to locate other PKI services. <a href="javascript:toggle_details();">[Details]</a>
<SCRIPT type="text/JavaScript">
function toggle_details()
{
d = document.getElementById('details');
if (d.style.display == "block") {
d.style.display="none";
} else {
d.style.display="block";
}
}
</script>
<div id=details style="display: none;">
<br/>
This PKI solution allows multiple security domains within an organization, but each security domain must host a Certificate Authority.
<br/>
If the user is creating a new security domain, this CA Administrator is also
the security domain Administrator.
<br/>
If this subsystem is joining an existing security domain, the user will need to provide the credential information of the security domain Administrator
requested in the next panel.
</div>
#if ($errorString != "")
<img alt="" src="../img/icon_crit_update.gif"> <font color="red">$errorString</font>
#end
<br/>
#if ($cstype == "CA")
<b><input $check_newdomain type=radio name=choice value="newdomain"> Create a New Security Domain </b>
<br/>
If no security domain exists, a new one must be created for this CA.
<table class="details">
<tr>
<th>Security Domain Name: </th>
<td><input type=text size="40" name="sdomainName" value="$sdomainName"> (e.g. - Dogtag Security Domain)</td>
</tr>
<tr>
<th>Security Domain HTTP EE URL (unsecure): </th>
<td>http://$machineName:$http_ee_port</td>
</tr>
<tr>
<th>Security Domain HTTPS Agent URL (clientauth): </th>
<td>https://$machineName:$https_agent_port</td>
</tr>
<tr>
<th>Security Domain HTTPS EE URL (non-clientauth): </th>
<td>https://$machineName:$https_ee_port</td>
</tr>
<tr>
<th>Security Domain HTTPS Admin URL (non-clientauth): </th>
<td>https://$machineName:$https_admin_port</td>
</tr>
</table>
<br/>
<b><input $check_existingdomain type=radio name=choice value="existingdomain"> Join an Existing Security Domain </b>
#else
<b><input disabled="disabled" type=radio name=choice value="newdomain"> Create a New Security Domain </b>
<br/>
If no security domain exists, a new one must be created for this CA.
<table class="details">
<tr>
<th>Security Domain Name: </th>
<td><input disabled="disabled" type=text size="40" name="sdomainName" value="$sdomainName"> (e.g. - Dogtag Security Domain)</td>
</tr>
</table>
<br/>
<b><input checked type=radio name=choice value="existingdomain"> Join an Existing Security Domain </b>
#end
<br/>
Enter the URL to an existing security domain.
<br/>
<table class="details">
<tr>
<th>Security Domain HTTPS Admin URL (non-clientauth): </th>
<td><input type=text size="40" name="sdomainURL" value="$sdomainURL"> (e.g. - https://example.com:9445)</td>
</tr>
</table>
<br/>
<table>
<tr>
<td valign="top"><b>NOTE: </b></td>
<td>Since a Security Domain MUST be a CA (although all CAs are NOT necessarily Security Domains), an appropriate value for this URL may be obtained by logging into the machine which hosts the desired Security Domain CA as 'root' and running the command "$initCommand status" from the command-line. If no Security Domain URL is shown, the CA subsystem is not a Security Domain.</td>
</tr>
</table>
<br/>
|
