Creating CA Hierarchy

This section explains the steps to create CA hierarchy for your private CA. This is a one time action. After you have created your CA hierarchy, it is used for every key/certificate pair you want to generate and sign with this CA.

Procedure

  1. Open a command prompt window.
  2. Navigate to the directory.
  3. Enter the following command, with the -newca parameter to create a CA hierarchy:
       CA.sh -newca
  4. Follow the prompt and enter filename of the CA certificates which should also contain the private key.
  5. Verify that the relevant files and directories are created in a directory.