Purchase and assign a quota on private certificates - Certificate Management Service

After you purchase a private certificate authority (CA), you can obtain a private root CA and a private intermediate CA. By default, the private root CA provides a quota that allows the private intermediate CA to issue 10 private certificates free of charge. If the quota cannot meet your requirements, you can purchase an additional quota based on your business requirements. This topic describes how to purchase and assign a quota on private certificates.

Prerequisites

A private CA is purchased and enabled. For more information, see Purchase and enable a private CA.

Purchase a quota on private certificates

Log on to the Certificate Management Service console.
In the left-side navigation pane, choose Certificate Management > PCA Certificate Management. On the PCA Certificate Management page, select the region where your PCA resides.
On the Private CAs tab, find the private root CA for which you want to purchase a quota and click Purchase Certificate in the Actions column.
In the Purchase Certificate panel, enter the number of certificates that you require, click OK, and then complete the payment.
Important
If the quota on private certificates that you purchase for a private root CA exceeds a specific threshold, you are not charged for the excess certificates. For more information about the threshold, contact your account manager.

Assign the quota on private certificates

After you purchase a quota on private certificates for a private root CA, you can assign the quota to a private intermediate CA that is subordinate to the private root CA and is in the Enabled state to issue server certificates or client certificates.

Log on to the Certificate Management Service console.
In the left-side navigation pane, choose Certificate Management > PCA Certificate Management. On the PCA Certificate Management page, select the region where your PCA resides.
On the Private CAs tab, find the private root CA whose quota you want to assign and click Assign Certificate in the Remaining Certificate Quota column.
In the Assign Certificate panel, configure the Select Intermediate CA and Remaining Certificate Quota parameters and click OK.
The default value of the Remaining Certificate Quota parameter indicates the quota that is already assigned to the selected private intermediate CA.

What to do next

After you assign the quota on private certificates to a private intermediate CA, you can apply for a server certificate or a client certificate. For more information, see Apply for a private certificate.