EUI support in Certificate Manager

This article includes updates for CM 8.7.1

The EUI component is marked for deletion in future releases of CM. Customers that use EUI are encouraged to switch to Certificate Manager (CM) REST API, as it provides the same functions.

With the Enrollment User Interface (EUI) an end user or administrator can use a web browser to request certificates.

The standard configuration supports server certificates and soft tokens. Protocol Gateway provides additional security by the option to require the user to be a CM Officer.

Default URL to EUI

<url>/pgwy/request/

The standard configuration supports certificate requests for the following usages:

server certificates, for example, TLS server certificates, (PKCS#10)
soft tokens (PKCS#12, Java key store etc.)

For server certificates, the administrator can select either binary or text as type of response and either PKCS#7 certificates only, with optional issuer chain, or X.509 as certificate encoding.

Access to the web pages located at <url>/pgwy/request/ cannot be disabled in eui.properties. The HTML files are located in the request folder of the unpacked web application and are served by Tomcat.