Create local CA

From i2Rest
Jump to: navigation, search


1. Open <IBMI>:2010/QIBM/ICSS/Cert/Admin/qycucm1.ndm/main0 , where <IBMI> is your IBM i system name or IP address
Note: in case of connection problems, first check that DCM admin server is started


Create local CA step1.png

2. Click on Create a Certificate Authority (CA):

Create local CA step2.png

3. Fill the form (at least required fields. Password here is not a password for *SYSTEM store!):

Create local CA step3.png

4. Continue:

Create local CA step4.png

5. Cancel


Optional steps:

Further are only required if you plan to issue certificates signed by local CA.

6. Open Manage Local CA -> Change policy data:

Create local CA step6.png

7. Select "Allow creation of user certificates" = Yes and click Continue:

Create local CA step7.png

8. OK, Cancel