EJBCA Administration
The EJBCA administration interface allows configuring and administrating EJBCA.
Accessing EJBCA
To access EJBCA from the Appliance WebConf, go to the Platform tab. The Applications section lists applications installed on your platform, along with their access links. Click the EJBCA link to access EJBCA.
EJBCA can also be accessed directly using the IP address according to the following example, http://<IPAddress>/ejbca/adminweb.
EJBCA Administration
The EJBCA Administration user interface allows configuring, administrating, and managing EJBCA on the EJBCA Hardware Appliance.
The administration interface is divided into the following menu sections based on administration operational tasks:
- CA Functions
- RA Functions
- Supervision Functions
- System Functions
For information on how to perform day to day administrative tasks in EJBCA, refer to the EJBCA documentation EJBCA Operations Guide. For an overview of EJBCA operations in general, see EJBCA Operations
The EJBCA Operations Guide is divided into separate sections for CA operations and RA operations:
- CA Operations Guide: Information on setting up CAs and profiles, and for general configuration of the EJBCA instance.
- RA Operations Guide: Covers enrolling for certificates, managing approvals, and certificate life-cycle.
For Administrators responsible for configuring and maintaining EJBCA installations, see the EJBCA CA Concept Guide for information on EJBCA concepts and configuration.
CA Operations Guide
The CA Operations Guide covers Certificate Authority Operations such as how to create, edit, and manage CAs, and information on End Entities, and setting up End Entity Profiles and Certificate Profiles.
RA Operations Guide
The RA Operations Guide covers EJBCA RA Management tasks and describes the EJBCA menu sections and the functions you can perform in the EJBCA RA GUI.
Command Line Interfaces
The Command Line Interfaces section includes information on the following EJBCA Command Line Interfaces (CLIs):
- EJBCA Client Toolbox: Set of tools built as a stand-alone package, which can be put on any machine and run independently of EJBCA. Includes a Web Service Interface.
- EJBCA Validation/Conformance Tool: Allows running tests on issued certificates or OCSP responses to see that they match the configured criteria.
- Local Command Line Interface (EJBCA CLI): The Local CLI can be run directly on the CA machine and contains many functions that can be used in scripts, or come to rescue when your Admin certificate has expired, or you have accidentally revoked your Admin privileges for the Admin GUI.
- Local Database CLI: Accessing a database, export, and import, copy, verify audit log and OCSP monitoring.
CAA Lookup Tool: Providing additional verification, fallback and troubleshooting for the built-in CAA Validator.
EJBCA Batch Enrollment GUI
Information on the EJBCA Batch Enrollment GUI, a standalone Java desktop application used to enroll multiple end entities from certificate signing requests at once
ConfigDump Export and Audit Tool
The ConfigDump tool produces a human-readable YAML output, which allows you to hand-modify exports, and the tool is useful for change handling and auditing.