Example of a root CA with PQC

Create a certificate profile

Create a certificate profile as described in the Keyfactor documentation: Create certificate profile.

For example:

certificate profile

Create a Crypto Token

  1. Create a crypto token as described in the Keyfactor documentation: Create crypto token.

    my first root ca crypto token 1

    The crypto token is added to the list.

    my first root ca crypto token 2

  2. Generate the following keys:

    Name Algorithm Key Usage

    myFirstRootCaSignKey0001

    ML-DSA-87

    Sign / Verify

    myFirstRootCaAltSignKey0001

    ML-DSA-44

    Sign / Verify

    myFirstRootCaEncryptKey0001

    RSA 4096

    Sign and Encrypt
    my first root ca keys

Create the CA

  1. Create the root CA as described in the Keyfactor documentation: Create CA.

    For example:

    my first root ca

  2. The new CA appears in the list of certificate authorities:

    available ca

  3. Select the View icon to display the new CA details.

    my first root ca details