Import new CA certificate and that External CA allowed to issue certificates to end entities.

[pragya1998hal]

Hello,

I am using CMP configuration.

I want to know Is it possible that we can create CA certificate from our end through open ssl command and will import that external ca certificate in EJBCA and that External CA allowed to issue certificates to end entities.

Currently I imported my external CA certificate in list of certificate Authority and after that I created certificate profile and End Entity profile and selected my external CA in available CA section. But when I try to Add End- Entity in that I didn't get my external CA in CA dropdown and getting error: Couldn't find CA (0) among End Entity Profiles Available CAs.

Please help me

[primetomas]

A CA need a private key in order to sign certificates. See here how to migrate form OpenSSL. https://docs.keyfactor.com/ejbca/latest/migrating-an-openssl-ca-to-ejbca

[pragya1998hal]

Thanku sir