This article describes how to import the Certificate Authority (CA) certificates that have been issued by an external CA, outside Smart ID Certificate Manager (CM). This task is done in the Administrator's workbench (AWB).

Prerequisites

The following prerequisites apply:

• An administration officer must sign the request.

• The officer must have the following roles:

  • Use AWB

  • CA and Key tasks

• A connection to the CM host must have been established (see Connect to a Certificate Manager host).

Import external CA certificate

1. In AWB, select Cross > Import Certificate.

2. In the Select File Containing Certificate dialog, select the relevant certificate file and click Open. An import dialog is displayed.

   1. If the certificate key is available in the local CM database, the Cross Certification dialog is displayed.

   2. If the certificate key is not available in the local database the Importing Certificate for External Key dialog is displayed (in this case, go to step 6).

3. To use the certificate in a CA with the matching key, select Go ahead with an existing Authority in the Cross Certification dialog, and highlight the appropriate CA in the selection field.

4. To instead create a new CA using that certificate, select Create a new Authority named and enter the name that will appear in the explorer bar in the name field.

5. Click OK.

   If a resident CA was selected, the certificate is added to the unsigned CA. If a new CA was selected, the new unsigned CA is displayed in the explorer bar. The CAs can be modified, see Modify CA in Certificate Manager.

6. Continued from step 2b: If the certificate key is not available in the local database the Importing Certificate for External Key window is displayed.

   1. Make sure that the Authority Type is set to CA

7. Enter the name of the CA that will appear in the explorer bar and click OK.

8. In the Signature dialog box, enter the PIN code for the officer and click OK.

You are returned to the AWB window.

Additional information