Enabling Signed Audit

Enabling Signed Audit via CLI

To enable signed audit via pki-server CLI, execute the following command:

$ pki-server ca-audit-config-mod --logSigning True

Then restart the server.

Enabling Signed Audit via TPS UI

To enable signed audit via TPS UI, go to System → Audit Logging. Disable logging first, click Edit, change the Signed Logging to true, then reenable the Logging.

Then restart the server.

Enabling Signed Audit Manually

The signed audit can be configured with the following parameters in /var/lib/pki/<instance>/conf/<subsystem>/CS.cfg:

log.instance.SignedAudit.logSigning=true
log.instance.SignedAudit.signedAuditCertNickname=<audit signing cert nickname>

Then restart the server.