What is she talking about? Leaf and root for DKDM?

[athanic]

Hi Carl ! can you tell me on how to deal with this? Cause i believe we only need the decrypting certificate by exporting the DCP decryption certificate which is in .PEM format ...Thanks in Advance

Dear Nick

Nice to meet you. My name is Samantha.

In order to generate the requested DKDMs I need more details.

We need the complete sever certificate from your Lab studio (leaf, root and chain) because it`s an unknown server model for our DKDM System
and the lab address / mail contact.

Thank you for your help

Besr regards,
Samantha

[carl]

Hi Nick,

The "Export DCP decryption certificate..." button just exports the "leaf" certificate from the list, but she wants all three. I suggest you select them one by one (root, intermediate, leaf) then click "Export" for each, then send the three files.

Cheers,
Carl

[athanic]

Thank you Carl for fast reply . The 3 certificates in The Decrypting DCP's panel right? not in the signing DCP's and KDM panel?

[carl]

If you want to decrypt DCPs that she is sending you KDMs for, yes.

[athanic]

Thank you very much Carl.

[athanic]

Follow up question sir Carl. She requested the leaf, root and chain i see a leaf and a root in the export decrypting dcps certificate panel but where is the chain? is it the one labeled as intermediate?...thanks in advance

[carl]

The chain is the collection of root, any number of intermediates, then the leaf. They refer to each other in a chain. So if you send her all the certificates, and make it clear which is which, that should suffice.

Alternatively you can join the three files together (root, then intermediate, then leaf) to make a single chain file (using a text editor is fine).