Post-Quantum PKI – Set up the NIST Candidate Algorithm Dilithium for Testing with EJBCA

In this tutorial, you will learn how to set up a post-quantum PKI with a Root CA and an issuing Sub CA using the NIST candidate algorithm Dilithium.

This setup is only for non-production use, since the NIST post-quantum cryptography (PQC) standards are not finalized and you will have to change the configuration when they are. However, it is good for learning, proof of concept, testing the new algorithms, and preparing for the migration to post-quantum PKI.

📚 *The tutorial covers these steps:*
1:33 Create certificate profiles for a Root CA and an issuing Sub CA
2:59 Create Crypto Tokens with Dilithium 2 and 3 keys used for CA signing keys
4:35 Create a Root CA using the Dilithium 3 signature algorithm
5:53 Create a Sub CA, signed by the Root CA, using the Dilithium 2 signature algorithms
6:51 View and download CA certificates

💡 *Prerequisites*
Before you begin you will need:

*Download*

*Documentation*

ℹ️ *About the Keyfactor Community*

🔗 *For more information:*