Create a local certificate authority

This procedure varies depending on the release of DCM you have installed on your iSeries system. The following procedure is for OS/400 Version 5 Release 1 Modification level 0 (V5R1M0). See the following topic for later release procedures:

• V5R4 Create and operate a Local CA
• V5R3 Create and operate a Local CA
• V5R2 Create and operate a Local CA

To create a local certificate authority (CA), perform these steps:

1. In the left pane, click Create a Certificate Authority (CA).

2. Fill in the fields and click Continue. The system creates a certificate authority certificate and stores it in the Local Certificate Authority (CA) certificate store.

   Note: Record the password used in this procedure in a secure location for future reference.

3. On the Install Local CA Certificate page, click Continue.

4. On the Certificate Authority (CA) Policy Data page, specify the policy data you want and click Continue.

5. On the Policy Data Accepted page, click Continue.

6. Fill in the fields and click Continue.

   The system creates a certificate with a private key and store the certificate in the default server certificate store (*SYSTEM).

7. On the Select Applications page, click Continue.

8. On the Select Applications Status page, click Continue.

9. Fill in the fields and click Continue.

   The system creates a certificate with a private key and stores the certificate in the default object signing certificate store (*OBJECTSIGNING).

10. On the Select Applications page, click the OK button.

    This completes the process of setting up your system as a Certificate Authority (CA).