Docs

Certificate Center

Quick start

Getting started

This tutorial will guide you through getting started with the Private CA service.

Simulation scenarios

This is based on the following simulation scenario:

Assume your enterprise has an internal application. This application provides services to employees via a domain name.

You want enterprise employees accessing this internal application to undergo mutual authentication, meaning the internal application (server) and the employee's terminal (client) each independently verify the other's identity.

In this scenario, your internal application and employee terminals each require certificates to prove their identity.

You can use the Private CA service to build a PKI (Public Key Infrastructure) system suitable for the intranet environment. Then, use the Private CA to issue client certificates to each employee and issue server certificates for the internal application. By pre-installing the top-level root of the private CA on the server side (for authenticating clients) and on the client side (for authenticating the server), mutual authentication between users and the intranet application can be achieved, ensuring communication security.

Steps

Includes the following steps:

Enable private CA service

Create private CA hierarchy

Issue and use private certificate

Last updated: 2026.04.01 10:55:25