Sign in to DigiCert® ONE as a Solution Administrator.
In DigiCert ONE, in the Manager menu (grid at top right), select Device Trust.
Depending on the type of credentials you need to add to an authentication policy, follow the relevant steps in the sections below.
In the Device Trust Manager menu, select Authentication management > Authentication policies.
Select the Authentication policy for which you want to add the Passcodes.
Click Add passcode.
Enter a Name.
This name must be unique within the chosen policy.
Optionally, add a Description.
Choose an existing authentication policy to assign to this passcode.
You can also create a new authentication policy.
Select whether you want the system to generate the passcode for you or if you want to provide your own passcode.
(Optional) Select the checkbox to enable the username requirement and specify a username for the passcode.
Set a Usage limit, or leave it blank for unlimited use.
Optionally, define a Start Date and End Date.
Optionally, add registered values.
For more information on registered values and how registered values work, see Registered values.
Select Create passcode. If you had DigiCert® generate the passcode for you, save it in a secure place, and click Finish.
In the Device Trust Manager menu, select Authentication management > Authentication policies.
Select the Authentication policy for which you want to add the Authentication certificates.
Navigate to the Authentication certificates tab and click Add authentication certificates.
Enter a Name. T
This name must be unique within the chosen policy.
Choose an existing authentication policy to assign to this authentication certificate.
You can also create a new authentication policy.
Authenticate devices for this certificate by specifying the authentication CA from the dropdown list or upload a certificate.
Select the Require passcode checkbox if you want the system to generate the passcode for you or if you want to provide your own passcode.
Set a Usage Limit, or leave it blank for unlimited use.
Define a validity period for this authentication certificate by specifying the Start and End dates.
Optionally, add registered values.
For more information on registered values and how registered values work, see Registered values.
Click Add authentication certificate.
In the Device Trust Manager menu, select Authentication management > Authentication policies.
Select the Authentication policy for which you want to add the Authentication CA.
Navigate to the Authentication CAs tab and click Add Authentication CA.
Upload the Authentication CA.
Optionally, add a Description.
Optionally, Assign or create an authentication policy for this CA.
Select or create an Authentication Policy for the CA.
Select an existing authentication policy to assign to this authentication CA from the dropdown list.
You can also create a new authentication policy.
Click Add Authentication CA.
The Automated Certificate Management Environment (ACME) protocol, defined in RFC 8555, is a widely used protocol for automating the certificate issuance and management process. ACME eliminates the need for manual interactions in certificate lifecycle operations, making it well-suited for IoT devices, cloud services, and other automated environments.
To add ACME credentials to the authentication policy:
In the Device Trust Manager menu, select Authentication management > Authentication policies.
Select the Authentication policy for which you want to add the ACME credentials.
Navigate to the ACME credentials tab and click Add ACME credentials.
Enter a Name.
This name must be unique within the chosen policy.
Optionally, provide a Description.
Choose an existing authentication policy to assign to this ACME credentials from the dropdown list.
You can also create a new authentication policy.
Upload a public key if you have one. If you do not have a public key, select the No, generate an HMAC for me option; the system generates a Hash-based Message Authentication Code (HMAC), which registers a public key with your account.
Set a Usage limit.
Define a validity period for this authentication certificate by specifying the Start and End dates.
Click Add ACME credential.