Before you begin
Before installing DigiCert® On-premises Private CA, contact your DigiCert account manager and make sure your environment meets these minimum requirements.
Account requirements
Contact your DigiCert account manager to activate your services and deliver this information:
License key. This unique string identifies the services and features you are entitled to.
Default sign-in credentials. You will set your own sign-in credentials when you sign in for the first time.
Hardware requirements
Computers: 3 (Recommended: 3 masters and 3 nodes)
CPU: 8
RAM: 32 GB
Processor speed: 2.5 GHz or greater
Hard disk space: 100 GB
Software and application requirements
Kubernetes
Command-line tool, such as kubectl, for running commands against Kubernetes clusters. For installation and setup instructions, refer to the Kubernetes documentation for your operating system:
Belangrijk
Install kubectl only on a master node.
Helm
Command-line tool for installing applications in Kubernetes clusters. Version 3.x or later required. For installation and setup instructions, refer to the Helm documentation.
Belangrijk
Install Helm only on a master node.
MariaDB
Open source relational database, accessible from your Kubernetes cluster. Version 10.6.x recommended. For installation and setup instructions, refer to the MariaDB documentation.
mariaDB must be configured for On-premises Private CA:
SET GLOBAL log_bin_trust_function_creators = 1; SET GLOBAL max_connections=1000; [Required] SET GLOBAL max_allowed_packet = 536870912; [Optional]
Communication and ports
Inbound traffic: TCP on ports 80, 443
Outbound traffic: TCP on port 443