EJBCA Training Manual

VA Peer Publisher

Introduction

EJBCA Publishers

Slide Deck: EJBCA Publishers

Overview: This second part of this lab configures the VA peer publisher, which will be used to "push" over the certificate & CRL data for our VA (OCSP) server.

NOTE: In the last step of this lab the data will be manually pushed to the VA instance. When the "EJBCA Services" module is discussed later, a service will be configured to "auto-magically" push this information going forward.

Slide reference

Publishers-8.png
Publisher queue options - this section is common to ALL publishers


Publishers-9.png
VA Peer specific publisher settings


Publishers-10.png
Publisher ability to manually push data to the VA


CA-1.png

Peer Publisher configuration

Reminder you can visit the Accessing Your Environment page for details on how to connect to your Admin web portal

To add a VA Peer Publisher:

  1. Open a browser and access your Admin Web Portal on the CA instance

  2. Click CA Functions >> Publishers

  3. In the Add Publisher field, enter VA Publisher and click Add

  4. In List of Publishers, select VA Publisher and click Edit Publisher

  5. In the Publisher Type list, select Validation Authority Peer Publisher

  6. In the Peer System list, select PeerConnector

  7. For the Store CRL at the Validation Authority option check the Use checkbox

  8. Click Save and Test Connection

Publish certificate data manually

To manually publish to the VA:

  1. Open a browser and access your Admin Web Portal on the CA instance

  2. Click System Functions >> Peer Systems

  3. For the PeerConnector, click Manage

  4. Select Certificate Data Synchronization tab

  5. Check the box for Ignore newer entries at peer

  6. Click Start to synchronize the certificates

  7. Click Refresh to update the page

  8. The result should look similar to this:

    Status:     Finished. Added: 0. Updated: 0.Failed: 6.
    Progress:	15 / ~15
    Duration:	less than a second
    
  9. Click Back to get back to the configuration view