Prerequisites
Make sure these prerequisites are met to enroll private trust certificates in DigiCert® Trust Lifecycle Manager using the Enrollment over Secure Transport (EST) protocol.
Create root and issuing CAs
If you already have access to an issuing CA on your account, skip this step.
If you have not, reach out to your system administrator or DigiCert representative to create the required CA hierarchy.
Opmerking
The Trust Lifecycle Manager EST service can make use of both RSA and ECDSA issuing CAs to sign either RSA or ECDSA end-entity certificates via the EST protocol.
Allocate seats
You can use EST to enroll certificates for devices or servers. You need available seat licenses allocated to the business units where you will enroll the certificates.
Add trusted CAs for client authentication certificates
If you want to authenticate EST clients with certificates instead of enrollment codes, use the Root CAs function in Trust Lifecycle Manager to upload the trusted CA certificates. To authenticate, clients must present a certificate signed by one of these trusted CAs.