Selecting allowed SAN lists

After creating a subordinate issuing authority, you can modify the list of allowed subject alternative names (SANs).

ℹ See Managing SAN lists for how to create allowed SAN lists.

To modify the allowed SAN list of a certificate authority:

1. Follow the steps described in Accessing your partitions to log into the PKIaaS interface as a user with any of these roles:

   • Owners
   • CA Administrators
   • Certificate Administrators

2. Click Certificate Authorities in the sidebar.

   

3. In the Certificate Authorities tab, click the three dots (…) to the right of a certificate authority.

4. Select Modify Allowed SAN List.

5. Add, replace, or remove the allowed SAN lists the authority will use for issuing certificates.