Configure and generate a new root CA.
In DigiCert® On-premises Private CA, in the CA Services menu, select Manage CAs > Roots.
Select Create root CA.
Select the Accounts that can use this root CA.
Select the HSM provider and HSM partition to save the keys to. (optional)
Change pathlen and issuance settings or accept the defaults.
Select a template and settings.
Enter a common name.
Enter a validity period.
Enter organization details.
Add organizational units and certificate policies. (optional)
Select Next.
Change root CA configuration or accept the defaults.
Select Create.