hi, im currently learning how to use ejbca, i wanna ask how can i remove the default managementca and only run using the subca that signed by an external ca, when i try to download the cert that the subca got to firefox, it gives me error that this is not CA cert, so cant import to ca list, how can i fix it and get the .p12 cert?
You can read about externally signed admin CAs here.
I don't understand what you mean by download the subca cert. What you need as an administrator is to issue an administrator certificate from the subca.
thanks for the reply, sorry for the confusing question, what i meant is how can i login the ejbca web with subca, as i seen in some documents people can login each CA with different option
i have done creating the subca but after i install the cert, it wont let me get in the admin page >"< it said authorization denided
You have to create administrator roles. You can find some documentation about that in the user guide as well.