Page History

...

• To set up the Certificate Authority (CA) a Root CA private key Private Key and self-signed certificate issued Certificate are created:
• The SSL Key Management sub sub-view is available to user accounts that are assigned the administrator role. To be more precise, user accounts have to be assigned the sos:products:joc:adminstration:manage role, see JS7 - Default Roles and Permissions.

...

Keys and Certificates

The Root CA private key Private Key and certificate Certificate can be updated/imported from an external CA and they can be generated by the JOC Cockpit:

• Operations for the Root CA private key Private Key and certificate Certificate include:
  
  • viewing the private key Private Key and certificate Certificate by using the  icon,
  • updating the private key Private Key and certificate Certificate by using the  icon,
  • importing the private key by using the Private Key by using the icon,
  • generating the private key Private Key and certificate Certificate by using the  icon.

View Key and Certificate

The Root CA private key Private Key and certificate Certificate are displayed like this:

Update Key and Certificate

The Root CA private key Private Key and certificate Certificate can be created from an external CA and can be updated by pasting from the clipboard like this:

Note:  For For the Root CA, the JOC Cockpit only supports ECDSA key algorithms as RSA key algorithms are not considered secure for the future.

Import Key

The Root CA private key Private Key can be created from an external CA and can be imported from a file like this:

...

Generate Key and Certificate

A Root CA private key Private Key is generated and a self-signed certificate issued Certificate is created like this:

The requested Distinguished Name (DN) is a unique identifier for the certificateCertificate.

• The DN can include any attributes allowed.
• The DN has to include the CN attribute
• Example:
  • CN=JS7 Root CA, OU=IT Operations, O=SOS,  LL=Berlin, SST=Berlin, C=DE