Hi, > We have used openxpki in our environment 'Version (core): 3.12.0'. We > required sub CA for our organization. Please help us or guide us on how to > configure it on the openxpki environment.
If you already have your Sub CA certificate and wish to configure a new PKI Realm to use this Sub CA certificate, see https://openxpki.readthedocs.io/en/latest/reference/configuration/realm.html If you wish to create Sub CA certificates with OpenXPKI you need to create a proper CA Certificate profile according to your organization's Certificate Policy. The absolute minimum requirements for a Sub CA certificate profile are basic_constraints.critical: 1 basic_constraints.ca: 1 extensions.key_cert_sign: 1 extensions.crl_sign: 1 Cheers Martin _______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
