Create a CMP profile
The CMP profile generates the URL required to connect your CMP client to DigiCert® Private CA. It also binds incoming requests to a specific issuing CA, certificate template, authentication method, and lifecycle rules.
Important
Make sure you have an end entity certificate template in DigiCert Private CA that fits your certificate requirements before you start creating a profile.
To create a CMP profile in DigiCert Private CA:
In the main menu, select Profiles.
Select Create profile.
Select CMP under Protocols.
Enter a Profile name.
[Optional] Add a Description for your profile.
Select the Protocol version you prefer, from the available options.
In Issuer CA, select the private intermediate certificate authority that you use for your certificate requests.
Select a Certificate template ID. You can only use one template in a profile. Create multiple profiles for different templates or certificate settings.
Select the Certificate validity details, like how many days, months, or years the issued certificates are valid for.
Enter a value in days for your preferred Renewal window. Your private CA rejects any renewal requests outside this window.
Select your Authentication method.
Global Authentication Code: Enter the Authentication code that clients use for initial enrollment.
One Time Passcode (OTP): Enter the Validity duration in minutes. After you create the profile, see Use a one-time passcode for enrollment to generate an OTP and the corresponding CMP enrollment URL, and provide them to the client before its first enrollment.
Select the Signature algorithm allowed by the profile.
Select Submit.
Your CMP profile is saved.
You can see all your profiles by navigating to Profiles in the main menu.
CMP URL
If your profile uses Global authentication code for authentication, go to the CMP profile in DigiCert Private CA and copy the URL.
If your profile uses One Time Passcode (OTP) for authentication, use the unique CMP enrollment URL returned when you generate the OTP for initial enrollment. See Use a one-time passcode for enrollment to learn how to generate it.
CMP URLs are structured as follows:
https://<your-ca-domain>/certificate-authority/api/v1/cmp/<ProfileID>
Where:
https://<your-ca-domain>is the base domain of your DigiCert Private CA instance./certificate-authority/api/v1/cmp/is the standard path used by DigiCert Private CA for CMP protocol communication. It identifies that the request is for a CA-managed CMP endpoint.<profile ID>is the unique identifier of the CMP issuance profile. Each profile you create in DigiCert Private CA gets its own automatically generated ID. This profile determines which CA, certificate template, and issuance policy the request follows.