Creating certificates from a micro CA

You can create web server TLS certificates from a micro CA.

About this task

Use Micro CAs to generate simplified certificates to use for testing. Certificates from a micro CA are not intended for production use. They are not exportable to a file.

Procedure

  1. Open certstore.nsf
  2. Create a micro CA:
    1. Click CONFIGURATIONS > Certificate Authorities.
    2. Click Add Account.
    3. In the Basics tab, provide a name.
    4. In the Local CA tab, change field values, if desired. For example change Key type. In the Organization field, specify an organization name.
    5. Click Save & Close to create the micro CA.
  3. Create a certificate from the micro CA:
    1. Select any TLS CREDENTIALS view.
    2. Click Add TLS Credentials.
    3. In the Certificate provider field, select MicroCA.
    4. In the Certificate authority field, select the Micro CA to use.
    5. In the Host names field, specify the host names of the internet-facing servers to request the micro certificate for.
    6. Optionally edit other fields.
    7. Click Submit Request.
    8. Click Save & Close.