Understanding the requirements

• For information on global requirements and recommendations, refer to section Understanding the global requirements

• You must have at least one Certification Authority with the following PEM files. Both files must be stored in the /etc/stormshield/pki/ directory. You can name them as you wish: the file names in the table are examples.

  These files will be referenced in the config.json file. For more information, see Certification authority (CA) parameters

  Description	File name example	Parameter in config.json
  File containing the CA certificate (and its trust chain) which will issue the users' certificates.	ca_certificate.pem	full_chain_certificates_path
  File containing the CA private key used to sign the certificate issued. Do not set a password, as private keys with password are not supported. No specific key usage is required.	ca_private_key.pem	key_path

  For an example on how to create these files, see Creating a CA with OpenSSL.

  For information on supported algorithms, extensions, key usages etc, see Compatibility of algorithms and CA properties.