How to create an Extended Validation (EV) compatible Root CA?
Originally Published: 2008-06-09
Article Number
Applies To
Issue
The profiles "EV SSL Root CA" and "EV SSL Subordinate CA" are not in the list of extension profiles to choose from when creating a CA
Resolution
To correct this, you must edit the Extension Profiles for those selections.
1. Access the RCM Administrative UI.
2. Go to the "System Configuration" workbench -> Extension Profiles
3. Select the profile named "EV SSL Root CA", click on Edit.
4. Change the Profile Type from "End entity" to "CA", then click Save.
Do the same thing with the profile "EV SSL Sub-ordinate CA".
Now when you go to create a new CA, at the jurisdiction configuration page during it's creation, in the Sections drop down, select Extension Profiles.
Select all profiles in the list (or only those you will need), click on Save and continue.
Select the extensions profile "EV SSL Root CA" or "EV SSL Subordinate CA" when creating your CA.
Related Articles
C_SetCertBER returns error E_UNKNOWN_CRITICAL_EXTENSION Number of Views What is the meaning of yellow flags in Microsoft Internet Explorer's icons for critical extensions? Number of Views Requests Pending Submissions queue accumulating in RSA Identity Governance & Lifecycle Number of Views How to sign more than 256K blocks of data with KCA API call XudaCASignData Number of Views 8031K G1 Image Causing Blue Screens On Reboot Number of Views
Trending Articles
Troubleshooting RSA SecurID Access Identity Router to RSA Authentication Manager test connection failures RSA SecurID Software Token 5.0.2 Downloads for Microsoft Windows RSA Authentication Manager 8.9 Release Notes (January 2026) Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory RSA Authentication Manager 8.8 Setup and Configuration Guide
Don't see what you're looking for?
