Create Post-Quantum Cryptography Hybrid CA Chain

In this tutorial, you will learn how to create a post-quantum cryptography (PQC) hybrid root certificate authority (CA) and a sub-CA. This involves setting up new cryptographic tokens, generating RSA and ML-DSA, and configuring certificate profiles.

The demonstration will also cover issuing a test hybrid certificate and verifying it using OpenSSL, showcasing the integration between traditional cryptography and post-quantum cryptography.

📚 The tutorial covers these steps:
0:38 Update the EJBCA container to version 8.3.2 or later.
1:49 Create crypto tokens for the PQC hybrid Root and Sub CA
3:37 Create and configure certificate profiles for the PQC hybrid CAs
5:29 Create the PQC hybrid Root CA
8:08 Create the PQC hybrid Sub CA
9:57 Create certificate profile and end entity profile to issue TLS Server PQC hybrid certificate
11:54 Create a PQC hybrid server TLS certificate using EJBCA RA Web
12:19 Review the PQC hybrid certificate with OpenSSL

💡 Prerequisites
Before you begin, you need:
- A running EJBCA instance with an active certificate authority (CA), certificate profiles, end entity profiles, and roles configured. To get started, see    • Get started with EJBCA and TLS certif...  .

Download
- EJBCA on Docker Hub: https://hub.docker.com/r/keyfactor/ej...
- EJBCA on GitHub: https://github.com/Keyfactor/ejbca-ce

Documentation
- Full tutorial:
https://docs.keyfactor.com/ejbca/late...

ℹ️ About the Keyfactor Community
As a pioneer in open-source cryptography, PKI, and signing, Keyfactor offers Bouncy Castle cryptographic APIs, the open-source certificate authority software EJBCA Community, and the open-source signing software SignServer Community. Join the Keyfactor Community, a hub for engineers, developers, and security experts seeking relevant solutions for cryptography, certificates, PKI, and signing while prototyping or testing their products and applications. The Keyfactor Community is a part of Keyfactor. Read more on https://www.keyfactor.com/open-source....

🔗 For more information:
- Visit the website: https://www.ejbca.org/
- Sign up for our newsletter: https://www.ejbca.org/#popup-newsletter
- Follow us on X (Twitter):   / keyfactorcomm