This tutorial walks you through the steps of setting up peer connectors and OCSP using EJBCA Enterprise. 

In this three part tutorial, you will learn how to:

  • Replace the VA or RA Server Certificate
  • Set up Peer Connectors
  • Set up an OCSP Signer

Step 1 - Replace the VA or RA Server Certificate

Follow this tutorial to learn:

  • How to create a truststore
  • How to create a keystore
  • Install the tuststore and keystore on the VA or RA server

Step 2 - Set up Peer Connectors

Follow this tutorial to learn:

  • How to create the CA client TLS certificate
  • How to create a Peer Connector
  • How to establish a TLS tunnel between the CA and the VA

Step 3 - Set up an OCSP Signer

Follow this tutorial to learn:

  • How to create the OCSP keys
  • How to create the OCSP profile and certificate
  • How to sign the OCSP responder