Create a Local CA

Within the ESKM Management Console, set up a local CA by following these steps:

  1. Go to the Security tab. 

  2. Click on the Certificates option under Certificates & CAs. 

  3. Scroll down to the Create Certificate section

  4. Enter a Certificate Authority Name and Common Name.
    These may have the same value, such as ESKM Local CA. 

  5. Enter your Organizational information. 

  6. Select the Algorithm (e.g., RSA-2048). 

  7. Click on Self-signed Root CA and enter the CA Certification Duration and Maximum User Certificate Duration.
    These values determine when the certificate must be renewed and should be set in accordance with your company's security policies. The default value for both is 3650 days or 10 years. 

  8. Click on Create.

image-20250627-065605.png

Local CA Creation Page

  1. Select the recently created CA Certificate. 

  2. Click on the Download button to download the CA certificate. 

65f00dc3-d76a-4b6b-9caa-9aedd4d642f0.png


Local CA details