Export a CA
Export a root CA or intermediate CA, including its keys, to back it up or move it. You can export a CA only if it was configured to allow key export when it was created. Export uses a two-person process: you trigger the export, and the account administrator you select completes it.
경고
An exported private key is no longer protected by DigiCert® Private CA. Store and transfer it only through channels approved by your security policy.
To distribute only the public certificate, use Download a CA certificate instead.
Before you begin
중요
To export a CA certificate, you need these DigiCert Private CA permissions: Recover escrow key, Manage escrow recovery request, and View escrow recovery request.
Export a root CA certificate
When a root CA certificate has been configured during creation to allow you to export its keys (private and public), you can export the certificate using a two-person authentication process.
In DigiCert ONE, in the Manager menu (top right), select CA.
In Certificate Manager, in the left main menu, go to Manage CAs > Roots.
On the Root Certificate Authorities page, select the root CA certificate.
On the Root certificate authority page, above On this page menu on the right, select More actions (three dots) > Trigger export.
On the Trigger CA export page, in the Select administrator to export CA dropdown, select the account administrator to whom you want to send the certificate.
Select Submit.
Export an intermediate CA certificate
When an intermediate CA certificate has been configured during creation to allow you to export its keys (private and public), you can export the certificate using a multi-factor authentication process.
In DigiCert ONE, in the Manager menu (top right), select CA.
In Certificate Manager, in the left main menu, go to Manage CAs > ICAs.
On the Issuing Certificate Authorities page, select the intermediate CA certificate.
On the Root certificate authority page, above On this page menu on the right, select More actions (three dots) > Trigger export.
On the Trigger CA export page, in the Select administrator to export CA dropdown, select the account administrator to whom you want to send the certificate.
Select Submit.