Internal CA Certificate Issuer

Administrator shall crate a Profile under Issuing CA. These steps are covered under Configure CA Certificate Profile.

Officer Login

Officer can use this profile to Sing the CSR as displayed in the following interface.

Generate Key Pair

Click on "Generate Key Pair " to open the following dialog:

Enter the number of keys that you want to generate. In general, you will need 1 key for 1 CA and 1 more key, if that CA will receive an OCSP certificate.

Select the "Key Profile" you want to use from the first dropdown list.

Choose the "Algorithm" from the drop-down

Select the "Signature algorithm" from the third dropdown list. This will filter the element for the third dropdown list accordingly.

Select the "Key Algorithm" and "Key Size" from the fourth dropdown list.

Press "Proceed" to continue and authenticate the action.

Click on "Generate Key Pair(s)" to generate the keys.

After the successful generation of the key pair, the success message as shown below.

Click on "View all" or "+ New" to continue with this new Key Pair creation.

Generate CA Certificate

After creating a key pair, the user needs to select the "Generate Certificate" or "CSR" option available in the "Action" column of the created key pair.

Click on to start generating a CA certificate.

The above window opens after clicking on “Action”.

Certificate – use the key to generate a new CA certificate directly.

Choose "Certificate" if you want to directly generate a new CA certificate. This option is applicable if the CA is "self-signed", or the "issuing CA" is in the same instance.

CA Administrator created certificate profiles will be available under “Certificate profile” dropdown.

For "Subject DN Details", enter all Subject Distinguished Name (Subject DN) information for the CA as per the certificate profile selection.

Press "Proceed" to continue. You will be prompted to authenticate the action using your officer token. Press "Authenticate" to proceed.

Officer is required to successfully authenticate and continue with “Create”.

The "Certificate" will be created, and the user is able to download the certificate.