# Setting Up PQC Issuance

In this section, set-by-step flow of PQC Certificate issuance in emCA is explained.

## PQC Certificate Profile Creation

1. Login as an Administrator
2. Click on Manage Profiles
   1. Certificate Profiles -> X509

<figure><img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2Fh9T0XnK0oIUEjuIWKICn%2Fimage.png?alt=media&#x26;token=e4c7b047-e95d-4742-bcb6-5b6bdf82e367" alt=""><figcaption></figcaption></figure>

3. Click on “+New Profile” to create a new PQC certificate profile
4. Fill in Basic Information
   1. Profile Type: User
   2. Sub Type: New
   3. Profile name: anything for identification
   4. Validity: as per your Region Certifying Authority Guidelines
   5. Issuing CA: Select your Issuer CA
   6. Signature Algorithm: Select the PQC Algorithm

<figure><img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2Fz2GH2JROIHzqizCcjYrG%2Fimage.png?alt=media&#x26;token=f73710d1-7780-4eb0-acd2-3c9e9b5de8ba" alt=""><figcaption></figcaption></figure>

5. Subject DN Details:
   1. Common Name
   2. Email
   3. Country
   4. Organization
   5. Organization Unit

<figure><img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FL63JaMupAa1y2fus7GxJ%2Fimage.png?alt=media&#x26;token=0a026a43-fb85-4728-86fc-2291ed657116" alt=""><figcaption></figcaption></figure>

6. X509 Certificate Extensions
   1. Basic Constraint
   2. Key Usage
   3. Enhanced Key Usage
   4. Authority Key Identifier

<figure><img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FVDXvlerpVHjN8ZS7vKQp%2Fimage.png?alt=media&#x26;token=10f65924-b380-4a7e-a242-ba10cfe5817f" alt=""><figcaption></figcaption></figure>

7. Click on “Proceed” and authenticate.

<figure><img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FJYm3Jij6wYfUH3PEhpdr%2Fimage.png?alt=media&#x26;token=702684e9-7c4e-4965-b533-279156e5b7b7" alt=""><figcaption></figcaption></figure>

8. Confirm after successful authentication. Profile will be successfully created

<figure><img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2F1ZYUrhNmsC9eyVqSoLvV%2Fimage.png?alt=media&#x26;token=3b8fa4b1-c4c1-42fb-9fef-41a62204a5e7" alt=""><figcaption></figcaption></figure>

## PQC Certificate Issuance

1. Login as an Officer User
2. Click on Manage User Certificates -> Enroll
3. Select the Token (Soft/Hard) where the Certificate needs to be stored
4. Select the PQC Certificate Profile that Administrator has created
5. Enter Subject DN and other details as per the Certificate Profile
6. Authentication as an Officer before requesting to create the certificate for security purposes

<figure><img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FVRxAU1pgDB4B92GgMQF8%2Fimage.png?alt=media&#x26;token=f04f2bc0-6eaa-4a0e-b16e-dd5e67cbd98f" alt=""><figcaption></figcaption></figure>

7. After successful authentication, please proceed to “Create” the certificate.

<figure><img src="https://2804668976-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOwstGDJbR4yGRTr2aEFp%2Fuploads%2FBD0I53L2F7YCcAzAzwjY%2Fimage.png?alt=media&#x26;token=ab5b9eb4-7473-4be4-9c55-285f39ee1f99" alt=""><figcaption></figcaption></figure>

8. PQC certificate will be ready to Download.