====== PFSense - Certificates - Create a Certificate Authority (CA) ======

A Certificate Authority (CA) is a trusted entity that issues Secure Sockets Layer (SSL) certificates.

----

===== Create the CA =====

Navigate to **System -> Cert Manager**.

  * Select the **CA** tab and create a CA by pressing the **“+”** button.

In **Create / Edit CA**:

  * Descriptive Name: **<some name to make it easy to identify**.
  * Method: **Create Internal Certificate Authority**.
  * Trust Store:  **<Not Checked>**.
  * Randomize Serial:  **<Checked>**.

In **Internal Certificate Authority**:

  * Key Type: **RSA**.
  * Key length: **2048 bit**.
  * Digest Algorithm:  **SHA 256**.
  * Lifetime: 3650. **(10 years)**.
  * Common Name: **ShareWiz - OpenVPN CA**.
  * Country Code: **JE**.
  * State or Province: **<blank>**.
  * City: **St. Helier**.
  * Organization: **ShareWiz**.
  * Organizational Unit: **<blank>**.

----