Breadcrumbs

Configure Veridium RA Server

Procedure:

  1. Start the VeridiumID RA & EP Configuration.

  2. Click on "Registration authority" tab.

    image-20230605-165830.png

  3. Click at "Create Template" button.

    image-20230605-165908.png

  4. Enter a new certificate template name (example: "BopsRSA") and click "OK" button.

    image-20230324-145705.png


  5. In the cmd window opened, press any key in order to complete the process (user input is required two times).

    CMD after import.png

  6. The import is successful.

  7. Select available Certification authority in a selected area (both are required).

    image-20230605-170046.png

  8. Button "Publish Template" should be enabled. Click "Publish Template" button.

    image-20230605-170251.png

  9. Press "OK" buttons on appeared message box.

  10. Now press the button "Enroll Certificate".

    image-20230605-170903.png

  11. Press "Create Template" button.

    image-20230605-171127.png

  12. Enter "VeridiumUser" to the marked area. Click "OK" button.

    image-20230324-150028.png

  13. Press "OK" button on appeared message box.

  14. Select Certification Authority.

    image-20230605-171305.png

  15. Click "Publish Template" button. On the window that will show up, press "OK" button.

    image-20230324-150116.png

  16. Press "Create Template" button.

    image-20230605-172236.png

  17. Enter "VeridiumUser" to the marked area. Click "OK" button.

    image-20230324-150232.png

  18. Press "OK" button on appeared message box.

  19. Select Certification Authority.

    image-20230605-172408.png

  20. Click "Publish Template" button. On the window that will show up, press "OK" button.

    image-20230605-172443.png

  21. Press "Edit JWT key" button.

    image-20230605-172640.png

  22. Copy and paste "JWT signing key" from the chapter https://veridiumid.atlassian.net/l/cp/Hyv3qV0h

    image-20230324-150405.png


  23. The registration authority is successfully configured.

    image-20230605-172822.png

  24. Click on the "Certificate Caching" tab.

    image-20230605-173230.png

  25. When certificate caching is not used, select “Don't use certificate caching“, and you are done now with configuration.

    image-20230605-173845.png

  26. The second option is machine caching. For this option select “Use certificate authority caching and encrypt cache using a Machine key“ and you are done now with the configuration.

    image-20230605-174156.png

  27. The third option is Recovery Agent caching, for this method select “Use certificate caching and encrypt cache using Key Recovery Agent Certificate“. In this case, after the certificate is enrolled. Cache DB might be re-encrypted using a “Re-Encrypt Cache DB“ button.

    image-20230605-174715.png

  28. Select available Certification authority in a selected area.

    image-20230605-174912.png

  29. Press "Create Template" button.

    image-20230605-174948.png

  30. Enter "BopsKRA1" into the marked area. (or any other name, it is just an example..) Click "OK" button.

    image-20230605-175243.png

  31. The button "Publish Template" should be enabled. Select the templated you just created and Click the "Publish Template" button.

    image-20230605-175439.png

  32. Press "OK" buttons on appeared message box.

  33. Now press the button "Enroll Certificate".

    image-20230605-175531.png