Adding an allowed SANs list

See below for adding a list of allowed Subject Alternative Names (SANs).

To create an allowed SANs list:

1. Follow the steps described in Accessing your partitions to log into the PKIaaS interface as a user with any of these roles:

   • Owners
   • CA Administrators

2. Click Certificate Authorities in the sidebar and select the Allowed SANs tab.

   

3. Select Add > Allowed SANs list.

4. Configure the following list settings.

   • Allowed SANs List
   • Hostnames
   • Networks

5. Click Add.

6. Add the new list to an issuing subordinate authority.

   • On authority creation, as explained in Creating an issuing subordinate authority.
   • After authority creation, as explained in Selecting allowed SAN lists.

Allowed SANs List

The unique identifier of the new list.

Hostnames

The DNS hostnames allowed by the list. For each hostname, select the corresponding match.

Networks

The allowed IPv4 and IPv6 network ranges, in CIDR (Classless Inter-Domain Routing) notation.

<IP address>/<prefix length>

See below for sample values.