Skip to main content

End Entity Profiles

End entity profiles bound what End Entities can be issued with, how they authenticate and more.

End Entity Profile Form​

End entity profiles can be created and edited at any time.

Basic Settings​

Provide name and description.

End Entity Profile Form section

Login ID Configuration​

Login ID controls how the created End Entity will have to identify itself when enrolling.

End Entity Profile Form section

Password Configuration​

Password configuration creates constraints for password strength or can specify one directly.

End Entity Profile Form section

Email Configuration​

Controls specification of End Entity email field, requiring one and bounding it to a domain.

End Entity Profile Form section

Subject configuration​

End entity Subject data can be controlled with this configuration

Subject DN Configuration​

The distinguished name fields here can be specified, required, or allow default values when none are provided.

End Entity Profile Form section

Subject SAN Configuration​

The alternate name fields here can be specified, required, or allow default values when none are provided.

End Entity Profile Form section

Certificate Profile and CA Settings​

This controls what certificate authorities and profiles can issue on behalf of this end entity profile. A selection of each available and a default from that available selection is required.

End Entity Profile Form section

Approval Settings​

Optional approval profile selection to require approvals for issuance that utilizes this end entity profile. See Approval Profiles.

End Entity Profile Form section

Validity Settings​

Controls the manipulation of the issued certificate's validity period, if enabled and set.

End Entity Profile Form section

Name Constraints​

Sets the Name Constraints extension.

End Entity Profile Form section

Custom Extensions​

Allows for user provided custom certificate extensions.

End Entity Profile Form section