By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Import a self-signed Root CA in ACM PCA

0

I am looking for an example on how to import a self signed root CA into ACM-PCA, possibly using openssl to generate the external CA.

The documentation hasn't helped me and seems to only work for subordinate CAs.

https://docs.aws.amazon.com/acm-pca/latest/userguide/PcaImportCaCert.html https://docs.aws.amazon.com/cli/latest/reference/acm-pca/import-certificate-authority-certificate.html

Topics
Security, Identity, & Compliance
Tags
Security, Identity, & ComplianceAWS Certificate Manager
Language
English
AWS
EXPERT
MassimilianoAWS
asked 4 years ago838 views
1 Answer
1
Accepted Answer

ACM Private CA supports three scenarios for installing a CA certificate :

Scenario 1. Installing a certificate for a root CA hosted by ACM Private CA.

Scenario 2. Installing a subordinate CA certificate whose parent authority is hosted by ACM Private CA.

Scenario 3. Installing a subordinate CA certificate whose parent authority is externally hosted.

It is not possible to import an external ROOT CA in ACM-PCA.

AWS
EXPERT
MassimilianoAWS
answered 4 years ago
AWS
EXPERT
JDB
reviewed 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content