I want to know if there is any possibility if we can implement deployment of EJBCA in offline and online mood simultaneously. What I require is to have one EJBCA instance (1st separate machine) with root certificate(Super admin) in offline mode or on HSM and 2nd instance (2nd separate machine) on online mode with admin certs and other CA issued by offline root certificate.
Please help if we can achieve that
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I want to know if there is any possibility if we can implement deployment of EJBCA in offline and online mood simultaneously. What I require is to have one EJBCA instance (1st separate machine) with root certificate(Super admin) in offline mode or on HSM and 2nd instance (2nd separate machine) on online mode with admin certs and other CA issued by offline root certificate.
Please help if we can achieve that
Further to above query i want both the instances to have pointed to single database.
You should be able to find information about Sub CAs issued by off-line Root CAs in the Admin/User guide at ejbca.org.
Using the same database kind of takes away the "off-line" aspect.
Cheers,
Tomas