Create a root CA
Create a self-signed root with the algorithm and lifetime you choose.
As pki-admin
Open Certificate Authorities
Click New CA
Select "Root" in Type
Fill Subject CN with "Lab Root CA"
Fill Subject Org with "Acme"
Select "ECDSA P-384" in Algorithm
Fill Validity with "10y"
The filled New Certificate Authority dialog
Click Create CA
