Breadcrumbs

Use the Local CA to Sign CSR

The CSR needs to be signed by the local CA. 

  1. View the KMIP_client.csr file created above using the cat command (cat kmip_client.csr) or open it using any text editor. 

  2. Select the entire text and copy it to the clipboard.  

Be sure to include the first and last lines (-----BEGIN CERTIFICATE REQUEST----- to -----END CERTIFICATE REQUEST--–––)”.

  1. Log in to the Management Console and navigate to Security > Certificates & CAs > Local CAs.

  2. Select the CA used by your ESKM (in this case, ESKMLocalCA), and click Sign Request. The Sign Request window is displayed.

ESKMClientcertsign.png

Sign Certificate Request

  1. For Certificate Purpose, select Client.

  2. Paste the CSR text that you have copied to your clipboard (Step 2 above) into the Certificate Request window.  

  3. Click Sign Request. The signed client certificate is displayed.

ESKMSignedClientcert.png

Certificate Information

  1. Copy the signed client certificate data to the clipboard.