Configure and generate a new intermediate CA.
In DigiCert® On-premises Private CA, in the CA Services menu, select Manage CAs > Intermediates.
Select Create intermediate CA.
Select the Accounts that can use this intermediate CA.
Select how you want to issue this intermediate CA.
Select the HSM provider and HSM partition to save the keys to (optional).
Select the DigiCert CA you want to sign and issue from.
Change pathlen and issuance settings or accept the defaults.
Select a template and settings.
Enter a common name.
Enter a validity period.
Enter organization details.
Add organizational units and certificate policies. (optional)
Select Next.
Change root CA configuration or accept the defaults.
Select Create.