Generate the ACM PCA Certificate for AWS

  1. Navigate back to the EJBCA Admin Web and click RA Web.
  2. Click Enroll > Use Username.
  3. Enter the username and Enrollment Code previously entered into the End Entity.  The values used in this guide are:
    • Username: acm_pca
    • Password: <your chosen password to be used only once>
  4. Click Check.
  5. Browse to the CSR.pem file and click Open.
  6. Click Download PEM and save the file.  
  7. Scroll to the top of the RA Web, select CA Certificates and CRLs.
  8. Download the public certificate for the Corporate Root CA - G1 by clicking PEM in the Certificate column, and then click Save this file.