Private Certificate

Once the issuer registration is completed, you can now proceed with the creation of private certificates.

1. Move to the User Creation Page

1) Click the "+ Create" button in the upper right corner of the [Certificate Management] - [Private Certificate] tab.

2. Enter Certificate Registration Information

[Screen] Screen for registering private certificates

Item(*is required)	Content
Cluster*	Select the cluster to generate the certificate
Namespace*	Choose the namespace for selecting the certificate
Certificate Name*	Enter the registered issuer name
Add Yaml	Check if you want to write in yaml format
Issuer Ref*	Enter the registered issuer name
Certificate Secret Name*	Specify the name for the private certificate to be created
Label	Enter the labels you want to register for the certificate
Annotation	Input comments or annotations for the certificate
isCA	Check if CA (Certificate Authority) usage is desired
Commom Name*	Provide at least one of the following: CN (Common Name), DNS list, email address list, IP address list, or URI list
Duration	Specify the requested 'Lifetime' of the certificate. If not set, the default is 90 days, with a minimum of 1 hour. Input format: {time}h {time}m {time}s Example: Enter 360 hours, 30 minutes, and 40 seconds as 360h30m40s. Specify the interval for renewing the certificate. The default is 2/3 of the issued certificate's lifetime, with a minimum allowed value of 5 minutes. Input format: {time}h {time}m {time}s Example: Enter 360 hours, 30 minutes, and 40 seconds as 360h30m40s."
Renew Before	Specify the interval for renewing the certificate. The default is 2/3 of the issued certificate's lifetime, with a minimum allowed value of 5 minutes. Input format: {time}h {time}m {time}s Example: Enter 360 hours, 30 minutes, and 40 seconds as 360h30m40s.
Revision History Limit	Number of CertificateRequests retained for the certificate
Usages	Click the "Add" button and check the purpose you want to use
DNS Names	Enter the DNS list you want to register
Email Addresses	Provide the email address list required for generating private certificates
IP Addresses	Specify the IP address list needed for generating private certificates
Uris	Enter the URI list required for generating private certificates

3. Confirm Private Certificate Creation

1) Verify the registered private certificate in the [Certificate] - [Private Certificate] tab.

[Screen] View of created private certificate list