Request Certificate

The following covers how to request a certificate for a standard user.

Create Standard User

To generate an EJBCA P12 file with a Certificate and Key for a standard user:

1. Access the RA Web in one of the following ways:

   • In the EJBCA Administration GUI, select RA Web in the bottom-left menu.

   • Access the RA Web directly at https://<EJBCA FQDN>/ejbca/ra/

2. In EJBCA RA, click Make New Request.

3. In the Select Request Template Certificate Type field, select Corporate User EE Profile.

4. Select the Key-pair generation option On Server to get an EJBCA generated P12 file with a certificate and Key.
   If you would like to instead use a CSR, select the Provided by user option.

5. Select the Key algorithm RSA 4096 bits.

6. Under Subject DN Attributes, specify the following:

   • CN, Common Name: Enter a common name for the user. This is usually the Username.

   • Optionally enter O, Organization and C, Country.

   • Username: Enter a username. This can be the same as the CN, Common Name.

   • Enrollment code: Enter the Enrollment Code (password) twice. This will be the same password that is used to protect the certificate bundle once downloaded.

7. Click Download PKCS#12 to download the newly created certificate file.

8. Save the P12 certificate file.