Implementation Guide › Changing Communication Encryption Methods › SSL, Authentication, and Certificates › Root and Server Certificates

Root and Server Certificates

A root, or CA, certificate is a trusted X.509 certificate that is validated by a Certificate Authority (CA). You use this trusted certificate to create additional X.509 certificates named server, or subject, certificates. Each server certificate is signed by the private key of the root certificate. If a reader trusts the root certificate, the reader knows they can trust any server certificate that is created from the root certificate.

The root certificate generates and authenticates server certificates. You can use the following types of root certificate in CA ControlMinder:

• The default CA ControlMinder root certificate
• A third-party root certificate, including a password-protected certificate

The server certificate encrypts and authenticates CA ControlMinder client/server communication and communication between CA ControlMinder components. You can use the following types of server certificate in CA ControlMinder:

• The default CA ControlMinder server certificate
• A third-party server certificate, including a password-protected certificate
• A CA ControlMinder server certificate created from a third-party root certificate