This guide is intended to show an administrator of a PrimeKey EJBCA Cloud on AWS instance how to generate new Transport Layer Security (TLS) certificates.
AWS Documentation
Information on AWS Public IP addressing is available in the AWS User Guide for Linux Instances.
Overview
This guide describes how to generate new TLS certificates in EJBCA Cloud.
New TLS certificates are needed in the following circumstances:
- EJBCA Cloud instance is shut down within the Amazon environment and the Public IP is released by Amazon.
- An Elastic IP is added to the instance in place of the Public IP for persistence.
- A custom DNS name is desired.
When using tools such as the ClientToolBox, the following error may be displayed:
"No subject alternative DNS name matching <instance ip>.compute-1.amazonaws.com found".
If this is encountered, perform the steps in this guide.
Documentation