By using AWS re:Post, you agree to the Terms of Use

Import a self-signed Root CA in ACM PCA

0

I am looking for an example on how to import a self signed root CA into ACM-PCA, possibly using openssl to generate the external CA.

The documentation hasn't helped me and seems to only work for subordinate CAs.

https://docs.aws.amazon.com/acm-pca/latest/userguide/PcaImportCaCert.html https://docs.aws.amazon.com/cli/latest/reference/acm-pca/import-certificate-authority-certificate.html

1 Answer
1
Accepted Answer

ACM Private CA supports three scenarios for installing a CA certificate :

Scenario 1. Installing a certificate for a root CA hosted by ACM Private CA.

Scenario 2. Installing a subordinate CA certificate whose parent authority is hosted by ACM Private CA.

Scenario 3. Installing a subordinate CA certificate whose parent authority is externally hosted.

It is not possible to import an external ROOT CA in ACM-PCA.

EXPERT
answered 2 years ago
EXPERT
reviewed 10 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions