Re: [Ejbca-develop] Using a certificate from an external CA to sign other certs

[Ejbca s. <ejb...@pr...>]

Yes, when creating the CA in EJBCA simply select:
Signed by: External CA

Then a request that can be sent to the external CA is created, and you 
must import the received certificate before the CA becomes active.
After this process it works just like any other CA in EJBCA.

Cheers,
Tomas
-----
PrimeKey Solutions offers a commercial EJBCA-subscription, including 
support and new extensions for EJBCA. Please see www.primekey.se or 
contact in...@pr... for more information.

SimonB skrev:
> Hi,
> 
> Is it possible to create a RootCA using an externally signed cert (by for
> example Entrust) and then use that CA to produce certificates for use on
> servers?
> 
> So for example:
> 
> Create an new RootCA with DN = 'CN=My Company,O=Organisation,C=GB'
> then go through the process to get it signed by an external CA.
> 
> Then when the response is received and imported use the now active CA it to
> create an end user certificate with CN=myserver.domain.com for use as an
> apache cert on a server.
> 
> Thanks in advance.