Determine when to issue a certificate with a private key based on security and usage requirements.
Determine when to issue a certificate with a private key based on security and usage requirements.
You're looking to add certificates to internal hosts for management using SSL. A two-tier PKI might not be necessary if you only need to resolve self-signed certificate issues internally. You should be able to sign certificates using a domain or IP address. Once you have the signed client cert and key, deploy them to the application serving your content, and install the root CA as trusted on your workstation.