Issue Certificates

TLS Server Certificate

1. Open a browser and click RA Web, from the ribbon menu across the top of page

2. Click Enroll >> Make New Request

3. In the Certificate Type drop-down list, select TLSServerEndEntityProfile

4. In the CA drop-down list, select Sub CA

5. In the Key-pair generation selection, select By the CA

6. In the CN, Common name field, enter ca.primekey.training

7. In the DNS Name field, enter ca.primekey.training

8. In the Username field, enter ca.primekey.training

9. In the Enrollment code field, enter a new password

10. In the Confirm enrollment code field, repeat the new password

11. Click Download PEM

12. Save the file

TLS Client Certificate

1. Open a browser and click RA Web, from the ribbon menu across the top of page

2. Click Enroll >> Make New Request

3. In the Certificate Type drop-down list, select TLSClientEndEntityProfile

4. In the CA drop-down list, select Sub CA

5. In the Key-pair generation selection, select By the CA

6. In the CN, Common name field, enter client00.training

7. In the Username field, enter client00.training

8. In the Enrollment code field, enter a new password

9. In the Confirm enrollment code field, repeat the new password

10. Click Download PKCS#12

11. Save the file

Download CRL

1. Open a browser and access your Admin Web Portal

2. Click CA Functions >> CA Structure & CRLs

3. For Sub CA click Get CRL

4. Save the file SubCA.crl

   
   

Revoke Certificate

1. Open a browser and access your Admin Web Portal

2. Click RA Functions >> Search End Entities

3. In the Search end entity with username field, enter client00.training

4. Click Search

5. For client00.training click Certificates >> View

6. In the Revocation list, select Unspecified

7. Click Revoke

8. Click OK to confirm revocation

9. Click Close

Create a New CRL

1. Open a browser and access your Admin Web Portal

2. Click CA Functions >> CA Structure & CRLs

3. For Sub CA click Create CRL - notice the CRL number will increase

4. For Sub CA click Get CRL