Certificates

Preparation

Windows

1. Create a management server certificate in PFX format with a private key (you need to issue a domain CA certificate) with the following attributes:
   1. Subject: Common name — <DNS name of the management server>
   2. Subject Alternative name:
      1. DNS — <DNS name of the management server>
      2. DNS — <DNS domain name>
2. Certificate Authority certificate in CRT format (Base64)

Linux

1. Create certificates for each server on which you plan to install Axidian Privilege components (you need to issue a domain CA certificate) with the following attributes:

   1. Subject: Common name — <DNS name of the component server>

   2. Subject Alternative name:

      1. DNS — <DNS name of the component server>

      2. DNS — <DNS domain name>

         caution

         Certificate attributes must be specified in lowercase.

2. Certificate Authority certificate in CRT format  (Base64)

Certificates Export

Windows

On the management server, add the management server certificate to the personal certificates.

Add the CA certificate to the trusted root certificates on all servers where Axidian Privilege components will be installed.

Linux

Export Axidian Privilege component server certificates in PFX format with the same password for all certificates.

Export the certificate of the certification authority in CRT (Base64) format.