Configure MSCA

This tutorial provides instructions on configuring the Microsoft Certification Authority (MSCA). This setup ensures that certificates issued by the Unifyia platform during identity issuance originate from MSCA.

Prerequisites

  • MSCA is already installed and all the required certificate profiles are configured.
  • You will require the following values:
    • CA Name
    • Web Service Root URL
    • CRL URL
    • SSL Client Certificate
    • Client Certificate Password
    • SSL Server Certificate
    • Fully Qualified DN

Configuration Steps

  1. Log in to the Unifyia platform.
  2. On the Dashboard page, navigate to Integrations > Certificate Authority. The Certificate Authority page appears.
  3. Select + Add Certificate Authority.
  4. Enter the following information:
    1. Provider: Select MSCA from the drop-down list.
    2. CA Name: Enter the name of the CA created in the CA server.
    3. Name: Enter the display name or a common name for this CA.
    4. Description: Enter a brief description of this CA integration.
    5. Web Service Root URL: Please input the web service root URL. This is the base URL or endpoint where the CA's web services are hosted.
    6. CRL URL: Enter the CRL URL. This is the URL of the location where the Certificate Revocation List is published.
    7. Authentication Type: Select Client Authentication from the drop-down list. This refers to the mode of authenticating to the MSCA UI.
    8. SSL Client Certificate: Upload the SSL client certificate from the saved location on your system. This is a certificate used to verify the identity of clients accessing the CA.
    9. Client Certificate Password: Enter the password for the client certificate.
    10. SSL Server Certificate: Upload the SSL certificate from the saved location on your system. This is a digital certificate issued by a CA to establish a secure connection with the server.
    11. Fully Qualified DN: Provide a value for the Fully Qualified DN that stands for Distinguished Name. This is a unique identifier for an entry in a directory service. For example, CN=John Doe,OU=Users,OU=Sales,DC=example,DC=com
  5. To check if the configuration is successful, select Test Configuration.
  6. After a successful test, select Save.

You have now successfully integrated the Microsoft Certificate Authority (MSCA) for your organization.