In this step, configure the certificates that will be issued for the target hosts.

Issue a single shared certificate for all hosts

Check this box to issue a single shared certificate for all hosts​ in the bulk destination. This mode: 

  • Does not support variables in Subject DN and SANs.
  • Ignores the Host-Generated (Certificate Manager) strategy, if selected. Certificate Manager generates the key, issues the certificate, and publishes them to each destination of the bulk destination.

Uncheck this box to issue a different certificate for each host in the bulk destination. This mode supports per-host variables in Subject DN and SANS.

Mandatory: No. This box is unchecked by default.

PKCS#12 Password

Step 4 displays this field when the profile selected in Step 1 - Job Setup generates the key on the CA side. Enter and confirm the password for the PKCS #12 that will protect the generated key.

Mandatory: When the profile selected in Step 1 - Job Setup generates the key on the CA side.

Use Subject DN from CSR

Step 4 displays this box when the strategy is Pre-Issuance Playbook. You can:

  • Check the box to make the Subject DN the one in the CSR set by the playbook.  
  • Uncheck the box to set the Subject DN in the Subject DN field described below.

Mandatory: No. This box is unchecked by default.

Subject DN    

The Distinguished Name (DN) of the issued certificates.

When the Issue a single shared certificate for all hosts box is unchecked, this field supports the following variables.

Variable

Resolved value

​{fqdn}

​The fully qualified domain name of the host

{hostname}

The hostname of the host

For example:

CN={fqdn}, O=MyOrganization, C=CA
CN={hostname}, O=MyOrganization, C=CA

When the Issue a single shared certificate for all hosts box is checked, this field only supports static values. For example:

CN=server.example.com, O=MyOrganization, C=CA
CN=*.example.com, O=MyOrganization, C=CA

Mandatory: Yes.

Requested Properties

Step 4 displays this field when the profile selected in Step 1 - Job Setup defines additional properties. Fill in the value of each property as specified by the profile configuration.

Field types may include text inputs, email fields, multi-line text areas, or dropdown selections, depending on the profile definition.

Mandatory: When the profile selected in Step 1 - Job Setup defines additional properties.

Subject Alt Name    

The Subject Alternative Names (SANs) for the issued certificates.  When the Issue a single shared certificate for all hosts box is unchecked, SAN values support the following variables.

SAN type

Supported variables

dNSName

​{fqdn}, {hostname}    

directoryName

—

uniformResourceIdentifier

—

iPAddress

{ip}

registeredID

—

otherName

—

When the Issue a single shared certificate for all hosts box is checked, SAN values of any type support only static values.

Mandatory: No.