Entrust PKI as a Service

Creating CA Gateway credentials

Create PKCS #12 credentials to connect to the CA Gateway API.

 Unless deleted before expiry, credentials are valid for one year. See Renewing CA Gateway credentials to renew them before they expire.

To generate a CA Gateway credential:

  1. Follow Accessing your instances to log in to the PKIaaS user interface using an account with one of the following roles:

  2. Click User Management in the sidebar.

  3. Select the CAGW Credentials tab.

    IMG

  4. Click CREATE.

  5. Fill in the Credential identifier and Friendly Name fields.

  6. Click Create.

  7. Check the details of the new PKCS #12 credential.

    IMG

  8. Copy the masked password by clicking the copy icon.

     You won’t be able to copy the password or download the PKCS #12 file after leaving this page.

  9. Click Download Credential to download the pkcs12-<credential>.p12 file, where <credential> is the Credential identifier value.

  10. Click CAGW Credentials in the sidebar.

  11. Click Continue in the Are you sure you want to leave this page? dialog.

  12. In the CAGW Credentials tab, select the three dots (…) to the right of the new credential.

    IMG

  13. Select Add Certificate Authority.

  14. In the Certificate Authority list, select the CA where the credential holders will have permissions.

    IMG

  15. In the Roles list, select the roles granted to the credential holders for the CA.

     See Role permissions for the CA management permissions granted to each role.

  16. Click Add.