# Setting Up Root CA Issuance

This section covers the setting up Root CA in emCA.

## CA Certificate Profile Creation

1. Login as an Administrator
2. Click on Manage Profiles
   1. Certificate Profiles -> X509
3. Basic Information
   1. Profile Type: CA
   2. Profile Name: Your Root User Identifier
   3. Validity: as per your CA guidelines
   4. Issuing CA: Please select the corresponding issuing CA for "Self-Signed" in order to create root CA else select any existing CA in order to SUB CA.
   5. Choose algorithm: Select the preferred Algorithm type.
   6. Signature algorithm: Select as per your preferred algorithm type.

<figure><img src="/files/kcKKPeWDt01HUXUVCxFK" alt=""><figcaption></figcaption></figure>

4. Select the DN details: These are as per your regional CA controller.
   1. House Identifier
   2. Country
   3. Organization

<figure><img src="/files/cOKpVHOoWmMV7lIz9HT1" alt=""><figcaption></figcaption></figure>

5. X509 Certificate Extensions: Select the X509 certificate extension
   1. Basic constraint,
   2. Key Usage,
   3. Subject Key Identifier, etc.

<figure><img src="/files/Fm5x5jBtMxVoAPjskrpn" alt=""><figcaption></figcaption></figure>

6. Click on “Proceed” once the selection of DN details and X509 Certificate Extensions are completed.

<figure><img src="/files/yqw9shMbrtBquG7QQbNC" alt=""><figcaption></figcaption></figure>

7. Authenticate as an Administrator

<figure><img src="/files/dtCWCq4NxJAIDDwspbJO" alt=""><figcaption></figcaption></figure>

8. Issuing CA Certificate Profile will be created successfully.

<figure><img src="/files/NtT82ve8s26ZVnpbwgvq" alt=""><figcaption></figcaption></figure>

## Officer Generating Key Pair

1. Login as an Officer User
2. Click on Manage CA Certificates -> Enroll
3. Generate Key Pair:
   1. Select the Number of Keys
   2. Key Profile: Select where you want to store the Keys
   3. Chose algorithm: Select the Key pair algorithm
   4. Signature algorithm: Select the signature algorithm as per the chosen algorithm
   5. Key Algorithm & Size: Select the size of the Key Algorithm as per the chosen algorithm

<figure><img src="/files/UOWz7w15UndWKew12sJG" alt=""><figcaption></figcaption></figure>

4. Click on Proceed
5. Authenticate as an Officer
6. Click on “Generate Key Pair”

<figure><img src="/files/2J2H8AQZHUZGMzZkmpyt" alt=""><figcaption></figcaption></figure>

7. Key pair is generated successfully. Click on “View All” to view the crested key pair or “New” for creating a new Key Pair.

<figure><img src="/files/e27lHUD3v55Ln06RUKPv" alt=""><figcaption></figcaption></figure>

## CA Certificate Issuance

1. Click on “Action: icon” for creating the certificate using the newly generated or existing key pair.

<figure><img src="/files/Cer7FJiJ4vlVqXfjwo55" alt=""><figcaption></figcaption></figure>

2. Enter the Root/ sub-CA Certificate Profile DN information as Administrator configured.

<figure><img src="/files/V9vgkwqaQzQFUo2rqPAO" alt=""><figcaption></figcaption></figure>

3. Authenticate as an Officer and click on “Create”

<figure><img src="/files/6FFYuhPHNGy8T7xu9a9B" alt=""><figcaption></figcaption></figure>

4. Certificate is ready to download after successful authentication.

<figure><img src="/files/7TvruDPCtipIIOIT4Lfs" alt=""><figcaption></figcaption></figure>

5. Click on “View all” to see all the issued CA certificates or “New” to create a new certificate with the key pair and CA certificate Profile.

<figure><img src="/files/ZL10LbmbNPPYQAEUznUZ" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://emca.emudhra.com/tutorials-and-guides/setting-up-root-ca-issuance.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.