Issuing CA
Obtaining an issuing CA
Issuing CAs are configured by your DigiCert® account manager in DigiCert® CA Manager using the information provided when signing up. Creating an issuing CA involves a key ceremony, during which the root CA is temporarily brought online to create an issuing CA. Once created, the issuing CA is ready to sign bootstrap and operational certificates for devices.
Certificate management policies
Issuing CAs work together with certificate management policies to set the parameters for certificate issuance. These parameters determine the conditions and protocols used to issue certificates, including protocols like EST, SCEP, CMPv2, ACME, and TrustEdge agent.