Skip to main content
Skip table of contents

Creating CA Hierarchy

The following describes the creation of multiple CAs to illustrate how authorities are created. To explain how to manage the certificate lifecycle with EJBCA, the following CAs are created:

  • Root CA named 'RootCA' as ROOTCA
  • SSL CA named 'SSLCA' as SubCA
  • Authentication CA named 'AuthCA' as SubCA
  • Signing CA named 'SignCA' as SubCA


In this scenario you have two devices:

  • one is hosting the SubCAs (Node A)
  • one is hosting the ROOTCA (Node B)









The EJBCA Hardware Appliance that hosts ROOTCA (Node B) will be offline after the successful setup of the SubCAs.


The steps to perform are described in the following sections:

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.