Issuing Certificates

Overview

This document describes the process for a CA agent to submit a certificate request to the Certificate Authority, approve the request, and retrieve the issued certificate immediately. It assumes that the certificate request has been previously generated.

Issuing Certificate with PKCS #10 Request

$ pki \
    -n caadmin \
    ca-cert-issue \
    --profile caUserCert \
    --csr-file testuser.csr
    --output-file testuser.crt

Availability: Since PKI 11.6.

Issuing Certificate with CRMF Request

$ pki \
    -n caadmin \
    ca-cert-issue \
    --request-type crmf \
    --profile caUserCert \
    --subject UID=testuser \
    --csr-file testuser.csr \
    --output-file testuser.crt

Availability: Since PKI 11.7.