Cannot Use EJBCA as Cluster Issuer

Question

I am trying to set up an EJBCA server to work as Cluster Issuer for all our services. Currently we use Vault to do that, but for external reasons we have to switch to EJBCA.

However, with my best effort I cannot seem to get it working. I keep getting "No client certificate was presented" errors when trying to access the Admin interface of EJBCA, and overall I cannot find an exhaustive documentation on the matter.

Is it at all possible to use EJBCA as Cluster Issuer, and if so how do I go about configuring it?

I have already tried deploying it using Bitnami's Helm chart, or Keyfactor's image, but to no avail.

Answer 1

While I can't answer your full question, I can say that the "No client certificate was presented" message is because you haven't installed the superadmin.p12 PKCS#12 file in the browser of the user who will be the Super Admin.

This file contains the client certificate which the message refers to.