000012211 - How to create an Extended Validation (EV) compatible Root CA?

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000012211
Applies ToRSA Certificate Manager 6.8
IssueHow to create an Extended Validation (EV) compatible Root CA?
The profiles "EV SSL Root CA" and "EV SSL Subordinate CA" are not in the list of extension profiles to choose from when creating a CA
ResolutionAn issue exists in the original release of RCM 6.8, where the profiles "EV SSL Root CA" and "EV SSL Subordinate CA" have been erroneously flagged as End-entity profiles instead of CA profiles.

To correct this, you must edit the Extension Profiles for those selections.

1. Access the RCM Administrative UI.
2. Go to the "System Configuration" workbench -> Extension Profiles
3. Select the profile named "EV SSL Root CA", click on Edit.
4. Change the Profile Type from "End entity" to "CA", then click Save.

Do the same thing with the profile "EV SSL Sub-ordinate CA".

Now when you go to create a new CA, at the jurisdiction configuration page during it's creation, in the Sections drop down, select Extension Profiles.

Select all profiles in the list (or only those you will need), click on Save and continue.

Select the extensions profile "EV SSL Root CA" or "EV SSL Subordinate CA" when creating your CA.
Legacy Article IDa40608

Attachments

    Outcomes