Configure Veridium RA Server

Procedure:

1. Start the VeridiumID RA & EP Configuration.

2. Click on "Registration authority" tab.

   

3. Click at "Create Template" button.

   

4. Enter a new certificate template name (example: "BopsRSA") and click "OK" button.

   

5. In the cmd window opened, press any key in order to complete the process (user input is required two times).

   

6. The import is successful.

7. Select available Certification authority in a selected area (both are required).

   

8. Button "Publish Template" should be enabled. Click "Publish Template" button.

   

9. Press "OK" buttons on appeared message box.

10. Now press the button "Enroll Certificate".

    

11. Press "Create Template" button.

    

12. Enter "VeridiumUser" to the marked area. Click "OK" button.

    

13. Press "OK" button on appeared message box.

14. Select Certification Authority.

    

15. Click "Publish Template" button. On the window that will show up, press "OK" button.

    

16. Press "Create Template" button.

    

17. Enter "VeridiumUser" to the marked area. Click "OK" button.

    

18. Press "OK" button on appeared message box.

19. Select Certification Authority.

    

20. Click "Publish Template" button. On the window that will show up, press "OK" button.

    

21. Press "Edit JWT key" button.

    

22. Copy and paste "JWT signing key" from the chapter https://veridiumid.atlassian.net/l/cp/Hyv3qV0h

    

23. The registration authority is successfully configured.

    

24. Click on the "Certificate Caching" tab.

    

25. When certificate caching is not used, select “Don't use certificate caching“, and you are done now with configuration.

    

26. The second option is machine caching. For this option select “Use certificate authority caching and encrypt cache using a Machine key“ and you are done now with the configuration.

    

27. The third option is Recovery Agent caching, for this method select “Use certificate caching and encrypt cache using Key Recovery Agent Certificate“. In this case, after the certificate is enrolled. Cache DB might be re-encrypted using a “Re-Encrypt Cache DB“ button.

    

28. Select available Certification authority in a selected area.

    

29. Press "Create Template" button.

    

30. Enter "BopsKRA1" into the marked area. (or any other name, it is just an example..) Click "OK" button.

    

31. The button "Publish Template" should be enabled. Select the templated you just created and Click the "Publish Template" button.

    

32. Press "OK" buttons on appeared message box.

33. Now press the button "Enroll Certificate".