Issue Certificates

TLS Server Certificate

Reminder you can visit the Accessing Your Environment page for details on how to connect to your RA web portal

1. Open a browser and click RA Web, from the ribbon menu across the top of page

2. Click Enroll >> Make New Request

3. In the Certificate Type drop-down list, select TLSServerEndEntityProfile

4. In the CA drop-down list, select Sub CA

5. In the Key-pair generation selection, select By the CA

6. In the CN, Common name field, enter ca.primekey.training

7. In the DNS Name field, enter ca.primekey.training

8. In the Username field, enter ca.primekey.training

9. In the Enrollment code field, enter a new password

10. In the Confirm enrollment code field, repeat the new password

11. Click Download PEM

12. Save the file

TLS Client Certificate

Reminder you can visit the Accessing Your Environment page for details on how to connect to your RA web portal

1. Open a browser and click RA Web, from the ribbon menu across the top of page

2. Click Enroll >> Make New Request

3. In the Certificate Type drop-down list, select TLSClientEndEntityProfile

4. In the CA drop-down list, select Sub CA

5. In the Key-pair generation selection, select By the CA

6. In the CN, Common name field, enter client00.training

7. In the Username field, enter client00.training

8. In the Enrollment code field, enter a new password

9. In the Confirm enrollment code field, repeat the new password

10. Click Download PKCS#12

11. Save the file

Download CRL

Reminder you can visit the Accessing Your Environment page for details on how to connect to your Admin web portal

1. Open a browser and access your Admin Web Portal

2. Click CA Functions >> CA Structure & CRLs

3. For Sub CA click Get CRL

4. Save the file SubCA.crl

Revoke Certificate

Reminder you can visit the Accessing Your Environment page for details on how to connect to your Admin web portal

1. Open a browser and access your Admin Web Portal

2. Click RA Functions >> Search End Entities

3. In the Search end entity with username field, enter client00.training

4. Click Search

5. For client00.training click Certificates >> View

6. In the Revocation list, select Unspecified

7. Click Revoke

8. Click OK to confirm revocation

9. Click Close

Create a New CRL

Reminder you can visit the Accessing Your Environment page for details on how to connect to your Admin web portal

1. Open a browser and access your Admin Web Portal

2. Click CA Functions >> CA Structure & CRLs

3. For Sub CA click Create CRL - notice the CRL number will increase

4. For Sub CA click Get CRL