Apply for a compliance certificate

Prerequisites

• You have purchased and enabled the Compliance CA Service. For more information, see Purchase and enable a Compliance CA.

• The Remaining Certificates for the compliance sub-CA is greater than zero. For information about how to purchase and allocate compliance certificate quotas, see Purchase and allocate compliance certificate quotas.

Procedure

1. Log in to the Certificate Management Service console.

2. In the navigation pane on the left, choose Certificate Management > Private Certificate Management. On the Private Certificate Management page, select the region where the PCA service is located.

3. On the Compliant CA tab, find your sub-CA and click Apply for Certificate in the Actions column.

4. In the Apply for Certificate panel, configure the certificate parameters as described in the following tables and click Confirm.

   After you submit the application, it undergoes a background review. The certificate is issued after the application is approved. After the certificate is issued, click Certificates in the Actions column of the sub-CA to view the certificate on the Certificates page.

   • If you select Alibaba Cloud for Key Container, Alibaba Cloud manages the private key of the compliance certificate and issues the certificate.

     Parameter	Description
     Personal Name	The subject name of the compliance certificate.
     More	Click More to add details to the certificate, such as a certificate name, company, and department.

   • If you select USBKey for Key Container, the certificate and its private key are stored on a USBKey hardware device connected to your local Windows system. Use this method for identity authentication and data signing.

     If you do not have a USBKey, click Get USBKey to contact technical support and request to have one mailed to you.

     Before you apply for the certificate, connect the USBKey to your local system and install the software from USBKeyControl.zip. After installing the control, return to the Apply for Certificate page and enter the USBKey password when prompted to log on.

     Important

     The USBKeyControl.zip file contains two application installers. Make sure that both applications are installed on your Windows system. For more information about how to change the USBKey password or name, see Install the USBKey control.

     Parameter	Description
     Personal Name	The subject name of the compliance certificate.
     System Account	If you use the certificate to log on to the Alibaba Cloud console, enter your Alibaba Cloud account ID. For information about how to find your account ID, see Modify basic account information. If you use the certificate to log on to your enterprise business system, enter the login account for the system.

Next steps

After the compliance certificate is issued, you can download it to your computer and install it on the client. For more information, see Download a compliance certificate and Deploying PCA for cryptographic assessments.