Database Initialization#

The following entries are added during installation.

Creating Base Entry#

dc=pki,dc=example,dc=com

Creating LDBM Backend#

cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=dc\3Dca\2Cdc\3Dpki\2Cdc\3Dexample\2Cdc\3Dcom,cn=mapping tree,cn=config
dc=ca,dc=pki,dc=example,dc=com

Creating Users Subtree#

ou=people,dc=ca,dc=pki,dc=example,dc=com

Creating Groups Subtree#

ou=groups,dc=ca,dc=pki,dc=example,dc=com
cn=Certificate Manager Agents,ou=groups,dc=ca,dc=pki,dc=example,dc=com
cn=Registration Manager Agents,ou=groups,dc=ca,dc=pki,dc=example,dc=com
cn=Subsystem Group,ou=groups,dc=ca,dc=pki,dc=example,dc=com
cn=Trusted Managers,ou=groups,dc=ca,dc=pki,dc=example,dc=com
cn=Administrators,ou=groups,dc=ca,dc=pki,dc=example,dc=com
cn=Auditors,ou=groups,dc=ca,dc=pki,dc=example,dc=com
cn=ClonedSubsystems,ou=groups,dc=ca,dc=pki,dc=example,dc=com
cn=Security Domain Administrators,ou=groups,dc=ca,dc=pki,dc=example,dc=com
cn=Enterprise CA Administrators,ou=groups,dc=ca,dc=pki,dc=example,dc=com
cn=Enterprise KRA Administrators,ou=groups,dc=ca,dc=pki,dc=example,dc=com
cn=Enterprise OCSP Administrators,ou=groups,dc=ca,dc=pki,dc=example,dc=com
cn=Enterprise TKS Administrators,ou=groups,dc=ca,dc=pki,dc=example,dc=com
cn=Enterprise RA Administrators,ou=groups,dc=ca,dc=pki,dc=example,dc=com
cn=Enterprise TPS Administrators,ou=groups,dc=ca,dc=pki,dc=example,dc=com

Creating Containers#

ou=requests,dc=ca,dc=pki,dc=example,dc=com
cn=crossCerts,dc=ca,dc=pki,dc=example,dc=com
ou=ca,dc=ca,dc=pki,dc=example,dc=com
ou=certificateRepository,ou=ca,dc=ca,dc=pki,dc=example,dc=com
ou=crlIssuingPoints,ou=ca,dc=ca,dc=pki,dc=example,dc=com
ou=ca,ou=requests,dc=ca,dc=pki,dc=example,dc=com
ou=replica,dc=ca,dc=pki,dc=example,dc=com
ou=ranges,dc=ca,dc=pki,dc=example,dc=com
ou=replica,ou=ranges,dc=ca,dc=pki,dc=example,dc=com
ou=requests,ou=ranges,dc=ca,dc=pki,dc=example,dc=com
ou=certificateRepository,ou=ranges,dc=ca,dc=pki,dc=example,dc=com
ou=certificateProfiles,ou=ca,dc=ca,dc=pki,dc=example,dc=com
ou=authorities,ou=ca,dc=ca,dc=pki,dc=example,dc=com
cn=aclResources,dc=ca,dc=pki,dc=example,dc=com

Creating Indexes#

cn=revokedby,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=issuedby,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=publicKeyData,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=clientId,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=dataType,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=status,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=description,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=serialno,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=metaInfo,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=certstatus,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=requestid,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=requesttype,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=requeststate,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=requestowner,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=notbefore,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=notafter,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=duration,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=dateOfCreate,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=revokedOn,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=archivedBy,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=ownername,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=issuername,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=subjectname,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=requestsourceid,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=revInfo,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=extension,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
ou=csusers,cn=config
cn=allCerts-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allExpiredCerts-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allInvalidCerts-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allInValidCertsNotBefore-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allNonRevokedCerts-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allRevokedCaCerts-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allRevokedCerts-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allRevokedCertsNotAfter-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allRevokedExpiredCerts-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allRevokedOrRevokedExpiredCaCerts-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allRevokedOrRevokedExpiredCerts-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allValidCerts-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allValidCertsNotAfter-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allValidOrRevokedCerts-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caAll-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caCanceled-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caCanceledEnrollment-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caCanceledRenewal-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caCanceledRevocation-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caComplete-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caCompleteEnrollment-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caCompleteRenewal-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caCompleteRevocation-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caEnrollment-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caPending-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caPendingEnrollment-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caPendingRenewal-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caPendingRevocation-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caRejected-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caRejectedEnrollment-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caRejectedRenewal-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caRejectedRevocation-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caRenewal-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caRevocation-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allCerts-pki-tomcatIndex,cn=allCerts-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allExpiredCerts-pki-tomcatIndex,cn=allExpiredCerts-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allInvalidCerts-pki-tomcatIndex,cn=allInvalidCerts-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allInValidCertsNotBefore-pki-tomcatIndex,cn=allInValidCertsNotBefore-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allNonRevokedCerts-pki-tomcatIndex,cn=allNonRevokedCerts-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allRevokedCaCerts-pki-tomcatIndex,cn=allRevokedCaCerts-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allRevokedCerts-pki-tomcatIndex,cn=allRevokedCerts-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allRevokedCertsNotAfter-pki-tomcatIndex,cn=allRevokedCertsNotAfter-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allRevokedExpiredCerts-pki-tomcatIndex,cn=allRevokedExpiredCerts-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allRevokedOrRevokedExpiredCaCerts-pki-tomcatIndex,cn=allRevokedOrRevokedExpiredCaCerts-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allRevokedOrRevokedExpiredCerts-pki-tomcatIndex,cn=allRevokedOrRevokedExpiredCerts-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allValidCerts-pki-tomcatIndex,cn=allValidCerts-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allValidCertsNotAfter-pki-tomcatIndex,cn=allValidCertsNotAfter-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=allValidOrRevokedCerts-pki-tomcatIndex,cn=allValidOrRevokedCerts-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caAll-pki-tomcatIndex,cn=caAll-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caCanceled-pki-tomcatIndex,cn=caCanceled-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caCanceledEnrollment-pki-tomcatIndex,cn=caCanceledEnrollment-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caCanceledRenewal-pki-tomcatIndex,cn=caCanceledRenewal-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caCanceledRevocation-pki-tomcatIndex,cn=caCanceledRevocation-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caComplete-pki-tomcatIndex,cn=caComplete-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caCompleteEnrollment-pki-tomcatIndex,cn=caCompleteEnrollment-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caCompleteRenewal-pki-tomcatIndex,cn=caCompleteRenewal-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caCompleteRevocation-pki-tomcatIndex,cn=caCompleteRevocation-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caEnrollment-pki-tomcatIndex,cn=caEnrollment-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caPending-pki-tomcatIndex,cn=caPending-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caPendingEnrollment-pki-tomcatIndex,cn=caPendingEnrollment-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caPendingRenewal-pki-tomcatIndex,cn=caPendingRenewal-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caPendingRevocation-pki-tomcatIndex,cn=caPendingRevocation-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caRejected-pki-tomcatIndex,cn=caRejected-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caRejectedEnrollment-pki-tomcatIndex,cn=caRejectedEnrollment-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caRejectedRenewal-pki-tomcatIndex,cn=caRejectedRenewal-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caRejectedRevocation-pki-tomcatIndex,cn=caRejectedRevocation-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caRenewal-pki-tomcatIndex,cn=caRenewal-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=caRevocation-pki-tomcatIndex,cn=caRevocation-pki-tomcat,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=index1160589769,cn=index,cn=tasks,cn=config

Creating Certificate Records#

cn=1,ou=certificateRepository,ou=ca,dc=ca,dc=pki,dc=example,dc=com
cn=1,ou=ca,ou=requests,dc=ca,dc=pki,dc=example,dc=com
cn=2,ou=certificateRepository,ou=ca,dc=ca,dc=pki,dc=example,dc=com
cn=2,ou=ca,ou=requests,dc=ca,dc=pki,dc=example,dc=com
cn=3,ou=certificateRepository,ou=ca,dc=ca,dc=pki,dc=example,dc=com
cn=3,ou=ca,ou=requests,dc=ca,dc=pki,dc=example,dc=com
cn=4,ou=certificateRepository,ou=ca,dc=ca,dc=pki,dc=example,dc=com
cn=4,ou=ca,ou=requests,dc=ca,dc=pki,dc=example,dc=com

Creating Subsystem User#

uid=CA-server.example.com-8443,ou=People,dc=ca,dc=pki,dc=example,dc=com
cn=5,ou=certificateRepository,ou=ca,dc=ca,dc=pki,dc=example,dc=com
cn=5,ou=ca,ou=requests,dc=ca,dc=pki,dc=example,dc=com

Creating Admin User#

uid=caadmin,ou=People,dc=ca,dc=pki,dc=example,dc=com
cn=6,ou=certificateRepository,ou=ca,dc=ca,dc=pki,dc=example,dc=com
cn=6,ou=ca,ou=requests,dc=ca,dc=pki,dc=example,dc=com

Creating Security Domain Subtree#

ou=Security Domain,dc=ca,dc=pki,dc=example,dc=com
cn=CAList,ou=Security Domain,dc=ca,dc=pki,dc=example,dc=com
cn=OCSPList,ou=Security Domain,dc=ca,dc=pki,dc=example,dc=com
cn=KRAList,ou=Security Domain,dc=ca,dc=pki,dc=example,dc=com
cn=RAList,ou=Security Domain,dc=ca,dc=pki,dc=example,dc=com
cn=TKSList,ou=Security Domain,dc=ca,dc=pki,dc=example,dc=com
cn=TPSList,ou=Security Domain,dc=ca,dc=pki,dc=example,dc=com
cn=server.example.com:8443,cn=CAList,ou=Security Domain,dc=ca,dc=pki,dc=example,dc=com

Creating Database User#

uid=pkidbuser,ou=People,dc=ca,dc=pki,dc=example,dc=com

Creating Lightweight Sub CA#

cn=06340cde-9b99-4b5e-a1f7-022db851ab79,ou=authorities,ou=ca,dc=ca,dc=pki,dc=example,dc=com

Creating CRL Issuing Points#

cn=MasterCRL,ou=crlIssuingPoints,ou=ca,dc=ca,dc=pki,dc=example,dc=com

Master Initialization#

The following entries are added on master during cloning.

Creating Install Token#

ou=sessions,ou=Security Domain,dc=ca,dc=pki,dc=example,dc=com
cn=8913011840038821724,ou=sessions,ou=Security Domain,dc=ca,dc=pki,dc=example,dc=com

Creating Replication Agreements#

ou=csusers,cn=config
cn=Replication Manager masterAgreement1-replica.example.com-pki-tomcat,ou=csusers,cn=config
cn=changelog5,cn=config
cn=replica,cn=dc\3Dca\2Cdc\3Dpki\2Cdc\3Dexample\2Cdc\3Dcom,cn=mapping tree,cn=config
cn=masterAgreement1-replica.example.com-pki-tomcat,cn=replica,cn=dc\3Dca\2Cdc\3Dpki\2Cdc\3Dexample\2Cdc\3Dcom,cn=mapping tree,cn=config

Creating SSL Certificate for Replica#

cn=7,ou=ca,ou=requests,dc=ca,dc=pki,dc=example,dc=com
cn=7,ou=certificateRepository,ou=ca,dc=ca,dc=pki,dc=example,dc=com

Registering Replica in Security Domain#

cn=replica.example.com:8443,cn=CAList,ou=Security Domain,dc=ca,dc=pki,dc=example,dc=com

Creating Serial Number Range for Replica#

cn=10000001,ou=requests,ou=ranges,dc=ca,dc=pki,dc=example,dc=com
cn=10000001,ou=certificateRepository,ou=ranges,dc=ca,dc=pki,dc=example,dc=com

Replica Initialization#

The following entries are added on replica during cloning.

Creating LDBM Backend#

cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=dc\3Dca\2Cdc\3Dpki\2Cdc\3Dexample\2Cdc\3Dcom,cn=mapping tree,cn=config
dc=ca,dc=pki,dc=example,dc=com

Creating Indexes#

cn=revokedby,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=issuedby,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=publicKeyData,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=clientId,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=dataType,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=status,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=description,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=serialno,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=metaInfo,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=certstatus,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=requestid,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=requesttype,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=requeststate,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=requestowner,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=notbefore,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=notafter,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=duration,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=dateOfCreate,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=revokedOn,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=archivedBy,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=ownername,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=issuername,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=subjectname,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=requestsourceid,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=revInfo,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config
cn=extension,cn=index,cn=ca,cn=ldbm database,cn=plugins,cn=config

Creating Replication Agreements#

ou=csusers,cn=config
cn=Replication Manager cloneAgreement1-replica.example.com-pki-tomcat,ou=csusers,cn=config
cn=changelog5,cn=config
cn=replica,cn=dc\3Dca\2Cdc\3Dpki\2Cdc\3Dexample\2Cdc\3Dcom,cn=mapping tree,cn=config
cn=cloneAgreement1-replica.example.com-pki-tomcat,cn=replica,cn=dc\3Dca\2Cdc\3Dpki\2Cdc\3Dexample\2Cdc\3Dcom,cn=mapping tree,cn=config
cn=repl keep alive 96,dc=ca,dc=pki,dc=example,dc=com

Replicating Entries#

Request Repository#

See CA Request Database.

Certificate Repository#

See CA Certificate Database.

References#