Entrust PKI as a Service

Updating an allowed SANs list

See below for updating an allowed SANs list.

To update an allowed SANs list:

  1. Follow the steps described in Accessing your partitions to log into the PKIaaS interface as a user with any of these roles:

  2. Click Certificate Authorities in the sidebar and select the Allowed SANs tab.

    Profile list
  3. Click the three dots () to the right of a list and select Modify Allowed SANs Lists.

  4. Update the following list settings.

  5. Click Modify.

Hostnames

The DNS hostnames allowed by the list. For each hostname, select the corresponding match.

Match Pattern Matches
Exact match example.com example.com
Exact match and subdomains example.com, *.example.com example.com
www.example.com
api.example.com
sub.api.example.com
Match subdomains only *.example.com www.example.com
api.example.com
sub.api.example.com

Networks

The allowed IPv4 and IPv6 network ranges, in CIDR (Classless Inter-Domain Routing) notation.

<IP address>/<prefix length>

See below for sample values.

Network Allowed IPs
192.168.1.0/24 IPs from 192.168.1.0 to 192.168.1.255
10.0.0.5/32 A single IP address
2001:db8::/32 An IPv6 network