Sunday, June 9, 2019

Deploying a Certificate, from XCA

There are scenarios that require you to implement your own private Certificate Authority (CA), such as VPNs, internal web servers, or lient authentication to web servers.

This is the fourth article in a four part series, that explains how to generate a Root Certificate, Client Certificates and Server Certificates, for authentication. In this article, you will learn how to use a tool called XCA to export the client certificate that was created earlier in this series.

Assumptions

  • Download XCA from http://sourceforge.net/projects/xca/
  • Install XCA (Admin Privilege Required)
  • Create a Root Certificate, using XCA
  • Create an Intermediary Certificate, signed with Root Certificate
  • Create a Client Certificate, signed by the Intermediary Certificate



Exporting a Client Certificate, using PKCS#12 format

1. Go to the “Certificates” tab
2. Highlight the desired certificate
3. Click on the “Export” button


4. Select the format as "PKCS#12 Chain"
5. Select the folder and filename to save the new information
6. Enter a name for the file, e.g. user@example.com


7. Enter an optional password. Leave it blank if no password will be used.

Congratulations!

You have exported you new client certificate.


See all the articles in this series:

  1. Create a Root Certificate
  2. Create a Client Certificate
  3. Create a Server Certificate
  4. Export a Client Certificate