Create an admin domain

Every CipherTrust Manager appliance has a root domain by default. Although you can create additional child domains, only one child domain is required for Verint encryption. A domain administrator role controls the creation, deletion, update, and user assignment of domains.

CipherTrust Manager allows you to partition a single instance into multiple domains, and allows separate administrators. These separate administrators are with separation of duties to manage encryption keys, security controls, and auditing in each domain.

A domain name can contain all characters and there is no restriction on the domain name length.

When configuring security settings in the Enterprise Manager, you must enter the same domain name created here.

Before you begin

Set the time server (NTP)

Procedure

Review the domain planning considerations (administration, administrative operations or practices, selecting parent CA, and key hierarchy).
Log on to the CipherTrust Manager Management Console as an Admin with domain creation permissions.
Under Admin Settings, go to Domains.
Select Add Domain.
In the Add Domain dialog, give the domain a name.
In the Admins field, define the initial set of admins who can log into the domain, assign users to groups to the domain, and create child domains. These Admins must have the correct permissions.

Include the default admin user and the administrator user created for the Enterprise Manager Security page.
Click Save.

What to do next

Generate a certificate signing request