Prepare Circle of Trust certificates

Create an update set in the trusted environment to export the trusted certificate to the production environment.

始める前に

Roles required: admin, security_admin

始める前に

Trusted instance

手順

1. In the trusted environment, navigate to sys_certificate.list.

   

2. Open the most recently created X.509 Certificate that was generated with the type Trust Store Cert.
   You may need to add the Created field to the list to find the most recent record. See Personal lists.
3. Select Export certificate to production.

   

   A signature is created along with the certificate.
4. Navigate to System Update Sets > Local Update Sets.
5. Find and open the code signing update.

   This update starts with the text code_signing_key_publicsigver.

   A new code signing update set record has been created by the previous steps. To find this record, sort the list using the Created by field and look for records with in the Name field.

6. View the relevant Signature Records and the X.509 Certificate.

   The update set includes the attachment for the signature record along with the entry of the signature in the table and the certificate.

   

7. Select the Export to XML related link.

   

8. Retrieve the update set in production.
   See Retrieve an update set for details.

   重要:

   Repeat these steps for your second key pair. Remember that there’s a key for both the cm_code_attest and cm_code_signing cryptographic modules.