In the below option from AWS Certificate manager, I have an option to create subordinate CA but not root CA,
Goal is to first create root CA certificate and then create sub-ordinate CA that is signed(issued) by root CA's private key.
Documentation also talks about creating subordinate CA but not about root CA
Does AWS certification manager allow creating private root CA? if yes, How to create private root CA with AWS Certification manager?
This changed today. ACM Private CA now supports creating roots and subordinates.
To use AWS ACM Private Certificate Authority, you must already have an intermediate or root CA available in your organization. Once you create the subordinate CA, you will generate a CSR and sign it with your certificate. This service is a low-cost solution for managing the issuance and renewals of private certificates.
If your goal is to create a Root CA that the world will accept for SSL certificates, that is going to be a very difficult challenge. Very few companies qualify to be a Certificate Authority and this requires a big investment in infrastructure, security, policies, and procedures.
