Creating a CA Chain using OpenSSL and Uploading on the CipherTrust Manager

1. Create Root CA (Self Signed).

   openssl req -x509 -newkey rsa:4096 -keyout root_key -out root_ca.crt -days 365
   

   Note

   Provide different Common Names for all the CAs in the chain.

2. Create Intermediate CA1.

   openssl req -out inter1_req -newkey rsa:1024 -keyout inter1_key
   

3. Sign Intermediate CA1 from Root CA.

   openssl x509 -req -in inter1_req -CAkey root_key -CA root_ca.crt -days 100 -CAcreateserial -out inter1_ca.crt
   

4. Create Intermediate CA2.

   openssl req -out inter2_req -newkey rsa:1024 -keyout inter2_key
   

5. Sign Intermediate CA2 from Intermediate CA1.

   openssl x509 -req -in inter2_req -CAkey inter1_key -CA inter1_ca.crt -days 100 -CAcreateserial -out inter2_ca.crt
   

6. Create Intermediate CA3.

   openssl req -out inter3_req -newkey rsa:1024 -keyout inter3_key
   

7. Sign Intermediate CA3 from Intermediate CA2.

   openssl x509 -req -in inter3_req -CAkey inter2_key -CA inter2_ca.crt -days 100 -CAcreateserial -out inter3_ca.crt
   

8. To create a chain of CAs, concatenate data of all the above created CAs in a file and name it All_certs.crt.

Uploading Certificates on the CipherTrust Manager

1. Go to Device CAs & SSL Certificates >> Known CAs.

2. Upload all the above created certificates one by one (that is, root_ca and all intermediate CAs), in the order of their creation.

3. Upload the certificate chain All_certs.crt.