Application Method 1: Entering Basic Information

Procedure

1. Choose System > About > Certificate Authority Service from the main menu.
2. Choose Certificate Application > Certificate Application from the navigation tree on the left.
3. On the Apply by Basic Info tab page, enter certificate application information.
   

   • The subject information in the certificate application request must be different from that of the associated CA. Otherwise, certificate application fails.
   • When applying for a certificate by configuring basic information, you can select only a profile whose certificate level is End entity.
   • The validity period of a certificate is the intersection of the following four validity periods: validity period of the CA associated with the certificate, validity period set in the certificate profile, validity period set in the associated CA, and validity period set during certificate application.
   • You can click Reset to clear parameter settings.

4. Click Submit.

Related Tasks

• Viewing a certificate

  On the PKI Management > Certificate page, click the SN of a certificate to view the certificate details.

  

  A certificate will be automatically deleted 30 days after it expires. If the number of certificates issued by the Certificate Authority Service exceeds 80% of the maximum number supported by the Certificate Authority Service, all expired certificates are automatically deleted.

• Updating a certificate

  On the PKI Management > Certificate page, click Update in the Operation column of a certificate to update it. After the certificate is updated, you can choose whether to download the certificate to the local computer.

  

  The certificate obtained by using CMP, privacy CA protocol or uploading the CSR file cannot be updated.

• Searching for a certificate

  On the PKI Management > Certificate page, enter the subject name of the certificate in the search box for a search. You can also specify the SN, validity period, revocation reason, issuer or status of the certificate in Advanced Search. The Certificate Authority Service supports fuzzy search by subject name, SN, validity period or issuer.

  On the Certificate Application > Application List page, enter the applicant, CA name, subject or submitted time of the certificate in the search box for a search. The Certificate Authority Service supports fuzzy search by applicant, CA name, subject or submitted time.

• Revoking a certificate

  On the PKI Management > Certificate page, click Revoke in the Operation column of a certificate to revoke it.

  

  Only certificates whose revocation reason is "Certificate is on hold" can have their revocation canceled. Certificates revoked for other reasons can no longer be trusted.

• Canceling certificate revocation

  On the PKI Management > Certificate page, click Undo Revoke in the Operation column of a certificate to cancel the certificate revocation.

• Downloading a certificate
  • On the Certificate Application > Application List page, click Download Certificate in the Operation column of a certificate to download it to the local computer.
    

    • When downloading a certificate that is requested by entering basic information, you need to enter a password. The password is a string of 8 to 32 characters containing at least three of the following: digits, uppercase letters, lowercase letters, and special characters. In addition, the password cannot contain two or more of the same characters consecutively.
    • Only successfully obtained certificates can be downloaded.
  • On the PKI Management > Certificate page, click Download in the Operation column of a certificate, enter the file name and password, and download the certificate to the local computer.
    

    • The file name is a string of 1 to 20 characters containing uppercase letters, lowercase letters, digits, hyphens (-), and underscores (_).
    • When downloading a certificate that is requested by entering basic information, you need to enter a password. The password is a string of 8 to 32 characters containing at least three of the following: digits, uppercase letters, lowercase letters, and special characters. In addition, the password cannot contain two or more of the same characters consecutively.