Versions Compared

Old Version 1

changes.mady.by.user Ann Base (Deactivated)

Saved on

compared with

New Version 2

changes.mady.by.user Ann Base (Deactivated)

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Change domain view in Certificate Manager Skip to end of metadata Created by Ann Base, last modified just a moment agoGo to start of metadata This article describes how to make a temporary change of an officer's home domain in the Domain hierarchy in Smart ID Certificate Manager (CM). The domains are used in Certificate Authority administration in Certificate Manager. This task is done in the Administrator's workbench (AWB) in Certificate Manager.

This article describes how to change certain parameters of a Certificate Authority (CA) in Smart ID Certificate Manager (CM). The name of the CA can be modified and the CA can be closed or reactivated.

Furthermore, CM includes functionality to renew CA certificates without breaking the certification chain of already issued end user certificates. Renewed CA certificates must replace the existing ones in the trust stores of all third party client software, server software and devices. The serial number and signature of the renewed CA certificate will differ from the certificate it replaces. A later expiry date and a different signing algorithm can optionally be chosen at time of renewal. After renewal, the old certificate will not remain in the database.

This task is done in Administrator's workbench (AWB) in Certificate Manager (AWB).

Prerequisites

Expand
titlePrerequisites

The following prerequisites apply:

  • Two administration officers must sign the request.
  • Both officers must have the following roles:
    • Use AWB
    • CA and Key tasks

A connection to the CM host must have been established. See Connect to a CM host.

Step-by-step instruction

Expand
titleModify CA
  1. In AWB, select the CA to be modified, by highlighting it.
  2. Select Modify from the Edit menu, the toolbar or the entity's short-cut menu.
  3. In the Modify dialog:
    1. To rename the CA, enter a new name in CA name.
    2. To deactivate or reactivate a CA, select a new State.
  4. To renew a CA, enter the new Expiration date, optionally select a new Signature algorithm and check Renew CA certificate.
  5. Modify the following parameters:
    1. the name that appears in the explorer bar of the AWB window
    2. change State to Active or Closed as required
    3. change Domain and Visible in subdomain
  6. When the required changes are complete, click OK and sign the request. See Sign tasks in Certificate Manager for more information.


Related information