Implementation Guide › Changing Communication Encryption Methods › SSL, Authentication, and Certificates › Root and Server Certificates

Root and Server Certificates

A root, or CA, certificate is a trusted X.509 certificate that is validated by a Certificate Authority (CA). You use this trusted certificate to create additional X.509 certificates named server, or subject, certificates. Each server certificate is signed by the private key of the root certificate. If a reader trusts the root certificate, the reader knows they can trust any server certificate that is created from the root certificate.

The root certificate generates and authenticates server certificates. You can use the following types of root certificate in CA Access Control:

• The default CA Access Control root certificate
• A third-party root certificate, including a password-protected certificate

The server certificate encrypts and authenticates CA Access Control client/server communication and communication between CA Access Control components. You can use the following types of server certificate in CA Access Control:

• The default CA Access Control server certificate
• A third-party server certificate, including a password-protected certificate
• A CA Access Control server certificate created from a third-party root certificate