See below for the certificate authority to generate a PKCS #12 file containing:

• A key pair generated by Entrust PKIaaS.
• The issued certificate.
• The CA certificate chain of the issued certificate.

To issue a PKCS #12:

1. Open the following URL in a Web browser. 

   https://<hostname>/v2/

   Where <hostname> is the IP address or domain name selected in General.

2. Log in to the Management Console as the user described in Creating partition administrators. 
3. If the user administers more than one partition, select the partition on which to manage certificate authorities and certificates. 
   

4. Click Certificate Authorities in the sidebar.

   

5. In the Certificate Authorities tab, click the name of the certificate authority that will issue the certificates.

   

   Certificate authority does not provide root certificate authorities with profiles for issuing PKCS #12 files.

   ---

   ---

6. Click Issue Certificate.

7. Select Server-side Generated Key Certificate (PKCS #12).

   

8. Complete the following values.

   • Certificate profile
   • PKCS #12 Password
   • Subject
   • Subject Alternative Names

9. Click Issue.

10. Check the certificate details and click Download your PKCS #12 to download the issued PKCS #12 file. 

    Certificate Authority does not store the generated key pair in any way. Once you leave this page, you cannot download the PKCS #12 file.

Certificate profile

Select one of the subscriber certificate profiles for the certificate authority to issue this certificate.

PKCS #12 Password

Type and confirm a password to protect the contents of the PKCS #12 file.

Subject

Enter a value for each RFC5280 attribute in the certificate subject’s Distinguished Name (DN).

Alternatively, you can:

1. Toggle the Advanced Subject switch
2. Type a Distinguished Name (DN) including additional attributes.

For example, when the certificate subject represents a corporate employee:

When the certificate subject represents a corporate domain:

Subject Alternative Names

Add optional Subject Alternative Names (SANs) for the certificate subject. Typically, SANs extend the domain names or IP addresses set in the Subject field of a TLS certificate. For example: