See below for issuing certificates for key pairs generated on the client side.

To issue certificates from the Certificate Authority console

1. Open the following URL in a Web browser. 

   https://<machine>/v2/

   Where <machine> is the IP address or domain name of the machine hosting Cryptographic Security Platform. 

   Do not omit the ending forward slash "/" on this URL.

2. Log in to the Management Console as the user described in Creating partition administrators. 
3. In the Select Partition dialog, select the partition on which to manage certificate authorities and certificates. 
   
4. Click Select.

5. Click Certificate Authorities on the sidebar.

   

6. In the certificate authorities grid, click the name of a certificate authority.
7. Click Issue certificate.
8. Configure the following settings. 
   • Certificate Type
   • Certificate Profile
   • Certificate Signing Request (CSR)
   • Use subject from CSR
   • Subject DN Attributes
   • Subject Alternative Names
9. Click Create.

Certificate Type

Select Client-side Generated Key Certificate (X.509 cert).

Mandatory: Yes.

Certificate Profile

The certificate profile for issuing the certificate.

Mandatory: Yes.

Certificate Signing Request (CSR)

The PEM or Base64 encoding of a CSR (Certificate Signing Request).

Mandatory: Yes.

Use subject from CSR

Enable this field to use the subject included in the certificate request as the subject of the issued certificate. 

Subject DN Attributes

Select the required Distinguished Name (DN) attributes.

Mandatory: When not enabling the Use subject from CSR field.

Subject Alternative Names

The list of subject alternative names (SAN) for the certificate. 

Mandatory: No.