Creating CA Hierarchy

This section explains the steps to create CA hierarchy for your private CA. This is a one time action. After you have created your CA hierarchy, it is used for every key/certificate pair you want to generate and sign with this CA.

Procedure

Open a command prompt window.
Navigate to the directory.
Enter the following command, with the -newca parameter to create a CA hierarchy:
```
   CA.sh -newca
```
Follow the prompt and enter filename of the CA certificates which should also contain the private key.
Verify that the relevant files and directories are created in a directory.