Kryptkeeper
Walkthrough · 11 steps

Create a certificate template

Set the key, lifetime, usage and approval rules for a kind of certificate.

As pki-admin

  1. Open /templates

    Open /templates

  2. Click New template

    Click New template

  3. Fill Name (identifier) with "web-server-30d"

    Fill Name (identifier) with "web-server-30d"

  4. Fill Display name with "Web Server (30 day)"

    Fill Display name with "Web Server (30 day)"

  5. Fill Validity period with "30d"

    Fill Validity period with "30d"

  6. Fill Extended key usage with "serverAuth"

    Fill Extended key usage with "serverAuth"

  7. Fill Allowed algorithms with "ECDSA-P256"

    Fill Allowed algorithms with "ECDSA-P256"

  8. Click pki-operator

    Click pki-operator

  9. Further down the dialog: approval, SSH and name-restriction options

    Further down the dialog: approval, SSH and name-restriction options

  10. The filled New template dialog

    The filled New template dialog

  11. Click Create

    Click Create