Onboarding Journey

AppViewX offers its customers a free trial of PKI for its SaaS customers. The trial period is valid for 30 days. Explained below is how to get started on the trial journey:

1. Upon signing up for the free PKI trial, you will receive an email with the subject line, Welcome to AppViewX Trial!, at your registered email address.

   This email contains your username. Use this username to log onto the AppViewX application. This is followed by another email with a Certificates Insights Report that provides valuable insights into the certificates discovered from Certificate Authority, along with detailed analysis on certificate management, security posture, and compliance status.

2. Click Login Now in the email to be redirected to the AppViewX application.
3. Set and confirm the new password to log on.
   Tip: Click the information icon for guidelines on creating a new password.

   The password is successfully saved to your Google Password Manager for future reference. An email that your password was changed successfully is sent to your inbox. An email follows with details of all the certificates expiring in the next 30 days.

4. On logging in, select the I accept the terms and conditions check box on the Terms of Service page to continue.
   The Welcome to AVX ONE Certificate Lifecycle Management window pops up.
5. Click Start PKI Trial to get started.

   Alternatively, you can access the PKI trial by any of the following ways:

   • Go to (Menu) icon > All Products. Click Try it free from Modernize & Simplify PKI.

     -OR-

   • From the Insights > Summary page, scroll down to Certificates by Issuing CAs and click Start Free PKI Trial.

     -OR-

   • Click Start PKI Trial on top of the page. On clicking this button, the button name changes to Manage PKI.

   A message, Unboxing your free trial...exciting things are coming! appears. A Welcome to PKI+ page is displayed listing the functionalities included in your free trial.

6. Click Continue.
   The Get Started with PKI+ page appears.
7. Click Create CA to create a PKI hierarchy by creating the root certificate authority.
   The Create Root CA page appears.

   1. Enter the fields as described in the table.

      Table 1. Field Description for Create Root CA page

      Field	Description
      Select CA Type
      *CA Name	By default, the CA name is populated. You can edit this and provide a name with no special characters expect hyphen (-) and undescore (_).
      *Valid for	By default, the validity is set to 10 years.
      Configure CA Subject DN Details
      *CA Common Name	Enter the root CA subject name.
      *Organization	Enter the organization name owning the CA.
      Organization Unit	Enter the business unit for CA operations.
      City	Enter the city name.
      State	Enter the state name.
      Country	Enter the country of the organization.
      Configure CA Key Size and Algorithm
      CSR Generation	You can only select AppViewX.
      *Key Size and Algorithm	Select the CA key size and algorithm from the dropdown list.
      Configure CA Artifacts
      Path Length Constraint	This is an optional parameter in an issuing CA certificate; it defines the number of sub CA chains created under that specific issuing CA certificate holding the path constraint value. By default, the value is None. This field can have any of these values: 0, 1, 2, 3, or none. For example, if it is set to 2, it means that only two intermediate CAs are allowed between the end-entity certificate and this CA certificate. None indicates unlimited.
      Custodian Settings
      Custodian	By default, the SaaS trial customer (logged in user) is added as the custodian. Custodians are responsible for approving any action performed in PKI. Custodians are the individuals responsible for issuance of root and intermediate certificates. They approve or reject certificate requests, manage the lifecycle of certificates, and ensure auditability and compliance. To add more custodians, click Manage. To add a custodian, see Custodian Management. Note: Quorum value is set to 50%, which means that if the custodian group has two members, then only one custodian is needed to approve any CLM action. Quorum value is an editable field and can contain values ranging from 20 through 100. You can edit this per your organizational need. Newly added custodians appear in the Custodian text box with an increment, for example, if one custodian is added, then the text box displays the default custodian +1.
      Note: Fields marked with red asterisk (*) symbol are mandatory.

   2. Click Create.
      A window with the summary of values entered appears.
   3. Click Proceed.
      A message, PKIaaS CA configuration added successfully, appears on the top of the page while another message appears, CA Creation in Progress.
   4. Custodian on clicking Approve or Reject, a message, Thank you for confirming your request. Your request has been successfully processed. Click below to launch AppViewX, appears.
      Note: The approval link in the email is valid for 48 hours.
      
      On approval, a message, CA Creation in Progress, appears and then changes to CA Successfully Created! while the Approval Status changes to Create-Approved.

      Note: You can create a maximum of two root CAs with your trial license.
8. Click Create subordinate CA. The Create Subordinate CA page appears.
   1. Enter the fields as described in the table.

      Table 2. Field Description for Create Subordinate CA page

      Field	Description
      Select CA Type
      *CA Name	By default, the CA name is populated. You can edit this and provide a name with no special characters expect hyphen (-) and undescore (_).
      *Issuer Name	By default, the issuer name is populated. You can edit this.
      *Template	By default, SubCA_Default is selected.
      *Valid for	By default, the validity is set to 5 years.
      Configure CA Subject DN Details
      *CA Common Name	Enter the subordinate CA subject name.
      *Organization	Enter the organization name owning the CA.
      Organization Unit	Enter the business unit for CA operations.
      City	Enter the city name.
      State	Enter the state name.
      Country	Enter the country of the organization.
      Configure CA Key Size and Algorithm
      CSR Generation	You can only select AppViewX.
      *Key Size and Algorithm	Select the CA key size and algorithm from the dropdown list.
      Configure CA Artifacts
      Path Length Constraint	This is an optional parameter in an issuing CA certificate; it defines the number of sub CA chains created under that specific issuing CA certificate holding the path constraint value. By default, the value is None. This field can have any of these values: 0, 1, 2, 3, or none. For example, if it is set to 2, it means that only two intermediate CAs are allowed between the end-entity certificate and this CA certificate. None indicates unlimited.
      Custodian Settings
      Custodian	By default, the SaaS trial customer (logged in user) is added as the custodian. He/she will get the approval links via email for all the actions performed in the PKI hierarchy creation.
      Note: Fields marked with red asterisk (*) symbol are mandatory.

   2. Click Create.

      A window with the summary of values entered appears.

   3. Click Proceed.
      A message, PKIaaS CA configuration added successfully, appears on top of the page while another message appears, Subordinate CA Creation in Progress.
   4. Custodian on clicking Approve or Reject, a message, Thank you for confirming your request. Your request has been successfully processed. Click below to launch AppViewX, appears.
      Note: The approval link in the email is valid for 48 hours.
      On approval, a message, Subordinate CA Creation in Progress, appears. Wait until it changes to Subordinate CA Successfully Created!
9. Click Issue Certificate.

   You will be redirected to the Enroll Server Certificate page. Follow the steps as described in the Adding/Enrolling Certificate to enroll your certificate.