I do not know how to issue new certificates under the same end entity

[bugz8unny69]

Finding information online on how to accomplish this process is scant and unclear. This is what I get from Bing Chat:

To create multiple certificates under the same end entity in EJBCA, you need to follow these steps:

Create the certificate profiles for each certificate you want to issue. [A certificate profile defines the settings and extensions of a certificate, such as validity, key usage, subject alternative names, etc.](https://doc.primekey.com/ejbca/ejbca-operations/ejbca-operations-guide/ra-operations-guide/certificate-and-end-entity-life-cycle-management)[1](https://doc.primekey.com/ejbca/ejbca-operations/ejbca-operations-guide/ra-operations-guide/certificate-and-end-entity-life-cycle-management)

Create an end entity profile and select the certificates that you want to have issued to a user assigned to that end entity profile in the Available Certificate Profiles list box (multiselect). [An end entity profile defines the information and enrollment options for an end entity, such as distinguished name, subject alternative name, password, token type, etc.](https://doc.primekey.com/ejbca/ejbca-operations/ejbca-operations-guide/ca-operations-guide/end-entities)[2](https://doc.primekey.com/ejbca/ejbca-operations/ejbca-operations-guide/ca-operations-guide/end-entities)[3](https://ejbca-develop.narkive.com/dojlhmlA/multiple-certificates-er-end-entity)

Add an end entity using the RA Web or the CLI and assign it to the end entity profile you created. [You can also specify the certificate profile and CA for each certificate you want to issue for that end entity](https://doc.primekey.com/ejbca/ejbca-operations/ejbca-operations-guide/ca-operations-guide/end-entities)[2](https://doc.primekey.com/ejbca/ejbca-operations/ejbca-operations-guide/ca-operations-guide/end-entities).

Issue the certificates for the end entity using the RA Web or the CLI. [You can either generate a new key pair and PKCS#12 keystore, or upload a CSR and download a PEM or DER certificate](https://doc.primekey.com/ejbca/ejbca-operations/ejbca-operations-guide/ca-operations-guide/end-entities)[2](https://doc.primekey.com/ejbca/ejbca-operations/ejbca-operations-guide/ca-operations-guide/end-entities). [You can also issue multiple certificates at once using a bulk of CSRs](https://doc.primekey.com/ejbca/ejbca-operations/ejbca-ca-concept-guide/end-entities-overview)[4](https://doc.primekey.com/ejbca/ejbca-operations/ejbca-ca-concept-guide/end-entities-overview).

Links, that send me to resources, that do not talk about anything regarding how to issue new certificates under the same EE?

Besides the ones from Bing Chat, here are other resources I looked at:

https://sourceforge.net/p/ejbca/discussion/123123/thread/769f747e/

https://ejbca-develop.narkive.com/dojlhmlA/multiple-certificates-per-end-entity

"Just issue a new certificate for the same username and it will have
multiple certificates"

How? Any attempt to do so, just errors out with 'Username already exists?'

https://certs.advania.is/doc/userguide.html#Issue%20a%20new%20server%20certificate%20from%20a%20CSR

Any assistance on this matter would be greatly appreciated.

Regards,
Horace

EDIT: I managed to accomplish somewhat of what I wanted, although in a tedious manner. :

1. Edit End Entity with the new values
2. Visit the deprecated EJBCA Public Web
3. Click on the 'Create keystore'.

Isn't there are more simplified manner? And am I to assume that this feature is simply not available on RA Web?

[primetomas]

Are you using the "make new request" function in the RA UI?
For an existing username, there is the "use username" enrollment function which works the same as the old public web.