Import a self-signed Root CA in ACM PCA

Question

I am looking for an example on how to import a self signed root CA into ACM-PCA, possibly using openssl to generate the external CA.

The documentation hasn't helped me and seems to only work for subordinate CAs.

https://docs.aws.amazon.com/acm-pca/latest/userguide/PcaImportCaCert.html
https://docs.aws.amazon.com/cli/latest/reference/acm-pca/import-certificate-authority-certificate.html

Accepted Answer

ACM Private CA supports three scenarios for installing a CA certificate :

Scenario 1. Installing a certificate for a root CA hosted by ACM Private CA.

Scenario 2. Installing a subordinate CA certificate whose parent authority is hosted by ACM Private CA.

Scenario 3. Installing a subordinate CA certificate whose parent authority is externally hosted.

It is not possible to import an external ROOT CA in ACM-PCA.

Import a self-signed Root CA in ACM PCA

Contenido relevante