Create a CA

The local CA is used to sign and verify the server certificate and may also be used to sign client
certificate requests. To create and install a local CA, perform the following steps.

1. In the ESKM Management console, go to Security > Certificates & CAs, and click Local CAs.

Create Local CA

2. Scroll down to the Create Certificate section.

3. Enter a Certificate Authority Name and Common Name. These may have the same value, for example, ESKMLocalCA.

4. Enter your Organizational information.

5. Select the Algorithm (e.g., RSA-2048).

6. Select Self-signed Root CA and enter the CA Certification Duration and Maximum User
   Certificate Duration. These values determine when the certificate must be renewed and should be set in accordance with your company's security policies. The default value for both is 3650 days or 10 years.

7. Click on Create.