Setting Up PQC Issuance

In this section, set-by-step flow of PQC Certificate issuance in emCA is explained.

PQC Certificate Profile Creation

1. Login as an Administrator

2. Click on Manage Profiles

   1. Certificate Profiles -> X509

1. Click on “+New Profile” to create a new PQC certificate profile

2. Fill in Basic Information

   1. Profile Type: User

   2. Sub Type: New

   3. Profile name: anything for identification

   4. Validity: as per your Region Certifying Authority Guidelines

   5. Issuing CA: Select your Issuer CA

   6. Signature Algorithm: Select the PQC Algorithm

1. Subject DN Details:

   1. Common Name

   2. Email

   3. Country

   4. Organization

   5. Organization Unit

1. X509 Certificate Extensions

   1. Basic Constraint

   2. Key Usage

   3. Enhanced Key Usage

   4. Authority Key Identifier

1. Click on “Proceed” and authenticate.

1. Confirm after successful authentication. Profile will be successfully created

PQC Certificate Issuance

1. Login as an Officer User

2. Click on Manage User Certificates -> Enroll

3. Select the Token (Soft/Hard) where the Certificate needs to be stored

4. Select the PQC Certificate Profile that Administrator has created

5. Enter Subject DN and other details as per the Certificate Profile

6. Authentication as an Officer before requesting to create the certificate for security purposes

1. After successful authentication, please proceed to “Create” the certificate.

1. PQC certificate will be ready to Download.