Enterprise CA (EC)

This example issues a certificate from the Enterprise CA.

1. Click New Certificate at the bottom left of the Desktop Admin console.
2. Source: Select Enterprise CA (AD CS) if it is enabled. The hint below it names the configured CA, for example Private certificates from TLSPilotLab Root CA.

3. Names: Enter the Common Name, for example “app01.tlspilot.com”, and further names or IP addresses under Domains / SANs if required and supported by the certificate template.
4. Settings: Select the issuing CA under Enterprise CA and the Certificate template. The template defines the validity. Under Renewals, TLSPilot shows the renewal period of the template, for example Template renewal period: 2 weeks. With Follow template renewal period switched on, which is the default for new certificates, the renewal window follows this period of the template, also when the template is changed later. Switch it off only if this certificate has to be renewed earlier than the template intends, and then set Renewal window (before expiry) yourself.

5. Deployments, Documentation and RBAC: Proceed as described in chapter Private CA (PC).
6. Issue: Select Issue now and click Finish.

In the certificate list, the column Type shows the source of each certificate, for example EC for the Enterprise CA, PC for the Private CA or AC for ACME. To narrow down the list, click the filter button, for example to filter by type, or enter a name such as “APP01” in the search field.