In some cases, you might want to have one of your CAs signing another external CA. This is typically performed in the following steps:
Assuming both your CA and the external CA are using EJBCA, the set up is performed as described in the following steps.
It is not possible to issue CA certificates using the RA Web in EJBCA 6.x versions. To issue a CA certificate in EJBCA 6.x you need to add an end entity using the CA Web, and then issue the CA certificate through the Public Web. This is the procedure described in the steps below.