Creating CV Certificates
Once a key pair is generated with CVCA/DVCA key purpose, the operator will create a CV Certificate against the generated key pair. To generate a new certificate, select a key pair and press the Certificates button. The following screen will then be shown:
In this screen the main details of the key pair are repeated at the head of the page, e.g. Key Alias, Key Algorithm details etc. The operator can perform multiple operations on a selected CV/DV certificate.
The following options are available:
- Enable/Disable Auto Rekey of the certificates to get them rekeyed before the time of their expiry
- Rekey Certificate manually
- Generate the following certificates:
- Generate a Self-Signed CVCA Certificate
- Generate a DVCA Certificate via SPOC (registered as External CA) or create a certificate request and export it on the disc to get it certified by an offline CA.
The 'Rekey Certificate' button will be disabled for a certificate in which 'Enable Auto Rekey' is enabled. In order to rekey a certifcate manually, do not enable the auto rekey functionality while creating a certificate.
Each of the above case is discussed one-by-one in the sections that follows:
See also